Singapore Airlines booking data for 46,000 records compromised in Amadeus data breach; 620 had additional details exposed

The exposed data does not include bank account or credit card information, technology provider Amadeus said. — AsiaOne pic

First Published: Wednesday, 04 Nov 2026 1:06 PM MYT

SINGAPORE, Nov 4 — The names of some Singapore Airlines (SIA) customers and their travel booking details were accessed without authorisation after airline technology provider Amadeus suffered a data breach.

Amadeus, which supports certain SIA reservations and booking processes, shared with Singapore’s flag carrier that data from about 46,000 SIA booking records was compromised.

An SIA spokesperson told AsiaOne that for about 620 booking records, additional information including email addresses, phone numbers, travel document details, and KrisFlyer membership numbers may have been accessed too.

The Spanish firm has confirmed to SIA that the exposed data does not include bank account or credit card information, and the unauthorised access also did not result in any modification to bookings.

“The incident was confined to Amadeus’ platform, and Amadeus has informed SIA that it has implemented containment measures and additional security safeguards following the incident,” the spokesperson added.

“SIA would like to assure all customers that the incident did not involve a breach of its IT systems.”

As a precaution, the carrier said it is directly contacting affected customers with upcoming travel to change their booking reference numbers, adding that it has informed the relevant authorities about the matter.

“SIA sincerely apologises to affected customers for any inconvenience caused,” the spokesperson said.

“The protection of our customers’ personal data is of utmost importance to SIA.”

Other global carriers affected by this data breach include Cathay Pacific, Japan Airlines, Korean Air and Malaysia Airlines.

According to a statement posted on Amadeus’ website in October, certain booking-display data was available through a software glitch. 

It said its investigations are ongoing, and there is no evidence that payment or financial data was accessed.

Amadeus added that there are no signs the vulnerability has been exploited for ransomware purposes, and that it has since implemented measures to fix the vulnerability as well as enhanced monitoring and detection capabilities. — AsiaOne