Airlines flying in and out of Australian airports impacted by customer data breach – News24

Qantas is investigating whether customer information may been breached in a booking service provider’s data exposure, after multiple other airlines confirmed they had been affected. 
Qantas is investigating whether customer information may have been breached in a travel technology provider’s data exposure.
Amadeus, which provides booking system technology to many airlines, has been impacted by a breach to its systems containing travel reservation information.
Qantas confirmed to News24.com.au that it was looking into whether any of its customer data had been caught up in Amadeus’ breach.
“We have been advised by global travel technology provider Amadeus that there has been unauthorised access to one of their systems,” a Qantas spokesperson said.
“Amadeus advised the issue was contained in September and we’re working with them to understand the impact to any Qantas bookings.”
Qantas has notified the Australian Cyber Security Centre and the Office of National Cyber Security.
“There is no impact to Qantas systems or databases which remain secure,” the spokesperson said.
Qantas is one of many airlines concerned by the breach, with Cathay Pacific and Malaysia Airlines both confirming customer data had been involved.
Cathay Pacific, which runs flights out most Australian international airports, said on Friday that the breach had affected 53,000 bookings.
According to a statement on Cathay Pacific’s website, Amadeus told the airline the unauthorised access in its system occurred between August 2023 and September 2026.
Cathay Pacific was notified of the issue on October 28 and further information was provided by Amadeus the following day. 
The accessed data mainly concerned booking references, passenger names and flight details, but additional information was accessed in a small amount of cases.
“Amadeus has confirmed that it has taken actions to contain the incident, including a password reset, and has implemented enhanced monitoring and detection capabilities on its systems,” the airline said in a statement.
“To date, Amadeus has not identified evidence that the affected data has been misused.”
The breach itself involved a vulnerability affecting a travel booking display environment of Amadeus, according to Reuters. 
Malaysia Airlines confirmed its customer information had been breached, but reassured that no financial information had been accessed.
Cathay Pacific also said there was no evidence that financial or payment information had been exposed in its systems. 
Japan Airlines was another major carrier impacted by the data breach.
The airline said 90,000 customers had basic booking information exposed, while 2,000 had additional information impacted, including passport numbers and frequent flyer numbers.
To join the conversation, please log in. Don’t have an account? Register
Join the conversation, you are commenting as Logout
Our Apps

source
This is a newsfeed from leading technology publications. No additional editorial review has been performed before posting.