46,000 SIA booking records accessed illegally in data breach affecting software provider Amadeus

SINGAPORE – About 46,000 Singapore Airlines (SIA) booking records have been affected by a data breach at the carrier’s reservation-technology provider, Amadeus.

In a media reply on Nov 3, an SIA spokesperson said that data illegally accessed by a third party included customers’ names, booking reference numbers, travel itineraries and booking classes.

For about 620 booking records, information including e-mail addresses, phone numbers, travel document details, and KrisFlyer membership numbers may have been accessed, the spokesperson added.

However, Amadeus has confirmed that bank account or credit card information has not been exposed, and no booking has been modified, SIA said.

The incident was confined to Amadeus’ platform, and the global travel technology provider, which supports certain SIA reservations and booking processes, has told SIA that containment measures and additional security safeguards have been implemented following the breach, the airline said.

SIA added that the incident did not involve a breach of its IT systems.

As a precaution, SIA said, it is directly contacting affected customers with upcoming travel to change their booking reference numbers.

SIA said it has also informed the relevant authorities about the matter.

“SIA sincerely apologises to affected customers for any inconvenience caused,” the spokesperson said.

“The protection of our customers’ personal data is of utmost importance to SIA.”

SIA joins a growing list of airlines that have reported customer data compromised in the Amadeus breach. These include Malaysia Airlines, Cathay Pacific Airways, Japan Airlines, South Korea’s Asiana Airlines, and others.