Singapore Airlines has said that around 46,000 booking records may have been affected by a cybersecurity incident involving Amadeus, its reservation technology provider. The disclosure makes the airline the latest major carrier to report potential customer data exposure following the breach.
The incident, disclosed on Tuesday, November 3, has raised concerns about the security of passenger information stored on third-party travel technology platforms. Several international airlines, including Cathay Pacific, Japan Airlines and South Korea's Asiana Airlines, have also reported that customer data was compromised in the incident.
Singapore Airlines said the information accessed during the breach included customers' names, booking reference numbers, travel itineraries and booking classes.
For approximately 620 booking records, additional personal information may also have been accessed. This includes email addresses, phone numbers, travel document details and KrisFlyer membership numbers, the airline's frequent flyer program details.
However, the airline clarified that Amadeus had confirmed that bank account and credit card information were not exposed. It also said that no bookings had been modified as a result of the incident.
The airline further assured customers that its own information technology systems had not been breached. The incident involved its reservation technology provider, Amadeus.
As a precautionary measure, Singapore Airlines is contacting affected customers who have upcoming travel plans to arrange changes to their booking reference numbers.
The move is intended to reduce potential risks associated with the unauthorized access to passenger booking information.
Amadeus said it had become aware of a vulnerability affecting a travel booking display environment. However, the company did not respond to a question about how many customers' information may have been affected.
Also Read: UAE, Saudi Arabia Account for Half of Gulf Cyberattacks
Singapore Airlines is among several international carriers reporting potential customer data exposure linked to the Amadeus incident.
Cathay Pacific Airways recently disclosed that approximately 53,000 bookings were affected, while Japan Airlines reported that the breach involved 92,000 customers.
South Korea's Asiana Airlines has also reported compromised customer information. Malaysia Airlines separately said that some of its customer information may have been affected.
The growing list of affected carriers highlights the potential impact of cybersecurity vulnerabilities involving third-party technology providers that support airline reservation and booking operations.