Malaysia Airlines warns customers of data exposure in Amadeus cybersecurity breach

Amadeus notified affected carriers of the data breach starting in late October 2026. — AsiaOne pic 

By Malay Mail

First Published: Sunday, 01 Nov 2026 10:51 AM MYT

KUALA LUMPUR, Nov 1 — Malaysia Airlines has warned customers that some of their personal information may have been exposed in a cybersecurity incident at Amadeus, the third-party technology provider that runs its airline reservation system.

In a statement yesterday, the national carrier said the incident may have affected certain customer information processed through Amadeus between August 2023 and September 2026, a window of roughly three years.

The airline stressed that its own IT systems were not compromised. It also said there is currently no evidence that financial information has been accessed.

“We are treating this matter with the utmost seriousness and are working closely with Amadeus and relevant parties to investigate the incident and assess its impact,” the airline said.

The statement did not say how many customers may be affected, what types of personal data were involved, or when and how the breach was discovered.

As a precaution, the airline urged customers to stay alert to suspicious or unsolicited communications, especially those asking for personal or financial details. Such messages are a common follow-on tactic after data breaches, when criminals use leaked information to make phishing attempts appear more convincing.

“The privacy and protection of our customers’ information remain our foremost priority,” the airline said, adding that it is committed to ensuring the matter receives the highest level of attention and appropriate safeguards.

Malaysia Airlines said it will provide further updates as more information becomes available.

Amadeus is one of the world’s largest providers of reservation and distribution technology to airlines and travel agencies. Last month, it was disclosed that Amadeus suffered a cybersecurity incident involving unauthorised access to its passenger reservation systems.

The breach affected multiple airlines, primarily in Asia, including Japan Airlines, All Nippon Airways, Korean Air, Asiana Airlines, Cathay Pacific, Malaysia Airlines, and Star Flyer.