Malaysia Airlines says Amadeus access may have exposed customer data

Malaysia Airlines says customer information processed through reservation-technology provider Amadeus may have been exposed between August 2023 and September 2026, after unauthorized access to a booking-information environment. The airline says its own systems were not breached and that there is no current evidence customers’ financial information was accessed; the scope and number of affected Malaysia Airlines customers remain unknown as the investigation continues. Other airlines have reported related exposure, including Cathay Pacific, Japan Airlines and All Nippon Airways, underscoring the potential reach of incidents involving shared third-party platforms. Malaysia Airlines is urging passengers to watch for suspicious messages seeking personal or financial details, while questions remain about how affected customers—including those who booked through travel agents—will receive specific guidance.