Intruder uses system account credentials to roam Amadeus airline booking system for nearly three years, hitting passengers of JAL, Cathay, ANA, Asiana and Korean Air

According to BleepingComputer, Japan Airlines said Amadeus notified it on October 23 of unauthorized access to its Passenger Service System between August 10, 2023 and September 23, 2026, exposing booking codes, names and flight details of about 92,000 JAL customers, plus emails, phones and passport numbers for about 2,000; ANA, Asiana and Korean Air also confirmed impact ^[1]. Cathay Pacific said on October 30 that Amadeus told it someone used login credentials assigned to its system account to access reservation data, affecting about 53,000 Cathay bookings, and that Amadeus reset passwords, enhanced monitoring and has found no misuse ^[2]. Passengers of affected airlines should watch for individual notices and beware of scams using booking codes, flight and passport details ^[1][2].

Industries mainly affected: Transportation & logistics

1. Watch for individual notices from your airline ^[1].