Amadeus
Nov 2026 · Graded Attested · Technology and Software · Beyond the filings
Incident summary
AmadeusNov 2026
Not yet quantified
AAttestedFrom August 2023 to September 2026, someone read airline bookings in Amadeus's reservation system using credentials assigned to an Amadeus system account. Names, booking references, and flight details went out across Cathay Pacific, Japan Airlines, and ANA, possibly with travel documents and frequent flyer numbers for some. How the credentials were obtained goes unsaid. The fix was a password reset and closer monitoring, a quiet admission that one service account guarded a shared platform and nobody was watching it.
Technology and Software
Cyber Security Breach at Global Travel Tech Company Hits Carriers Including Japan Airlines, Qantas
Initial attack type software vulnerability inferred
About this record
This incident is beyond the filings: attributed to a company statement, a regulator or court record, or a news report, and graded Attested or Inferred. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.