Amadeus airline passenger service system breached: JAL says booking records of about 92,000 people, including about 2,000 passports, were viewed

Amadeus IT Group, which runs the reservation, ticketing and check-in system for many airlines, told Japan Airlines (JAL/JTA) on 2026-10-23 that attackers had accessed its system. JAL says booking records were viewed between 2023-08-10 and 2026-09-23: about 90,000 people (booking number, name, flight date, route, class), plus about 2,000 whose email, phone, passport number, nationality, mileage number, ticket and seat numbers were also exposed. JAL says no card numbers or passwords leaked. Amadeus says it has finished fixing the security problem, and no misuse has been seen so far. How attackers got in is unknown. Whether other Amadeus airline or travel customers are affected is also unknown. Organizations whose staff fly JAL, or who use Amadeus for travel, are at risk of targeted phishing that uses real booking details.

Summary written from the sources below. Check the originals before acting.