---
id: "CMP-202610-amadeus-airline-passenger-service-system-breached-jal-says-b"
kind: "campaign"
aliases: []
title: "Amadeus airline passenger service system breached: JAL says booking records of about 92,000 people, including about 2,000 passports, were viewed"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Amadeus", "fixed": [], "ecosystem": "vendor"}, {"name": "Japan Airlines", "fixed": [], "ecosystem": "vendor"}]
ecosystems: []
tags: ["campaign", "early-warning"]
not_affected_if: []
published_at: "2026-10-28T00:00:00+00:00"
first_seen_at: "2026-10-28T19:17:20+00:00"
updated_at: "2026-10-28T19:17:20+00:00"
sources: [{"source": "analyst", "url": null, "first_seen_at": "2026-10-28T19:17:20+00:00"}]
---

# Amadeus airline passenger service system breached: JAL says booking records of about 92,000 people, including about 2,000 passports, were viewed

Amadeus IT Group, which runs the reservation, ticketing and check-in system for many airlines, told Japan Airlines (JAL/JTA) on 2026-10-23 that attackers had accessed its system. JAL says booking records were viewed between 2023-08-10 and 2026-09-23: about 90,000 people (booking number, name, flight date, route, class), plus about 2,000 whose email, phone, passport number, nationality, mileage number, ticket and seat numbers were also exposed. JAL says no card numbers or passwords leaked. Amadeus says it has finished fixing the security problem, and no misuse has been seen so far. How attackers got in is unknown. Whether other Amadeus airline or travel customers are affected is also unknown. Organizations whose staff fly JAL, or who use Amadeus for travel, are at risk of targeted phishing that uses real booking details.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Amadeus affected ? fixed ?
- vendor:Japan Airlines affected ? fixed ?

## How to check

Check whether your company or travel agency books through Amadeus or flies JAL/JTA, and whether staff traveled on JAL/JTA between 2023-08-10 and 2026-09-23. Look out for emails, calls or sites claiming to be JAL or your travel provider that quote real booking numbers, routes or passport details. JAL is contacting affected customers directly. Indicators of compromise: none published (unknown).

## Fix

Warn travelers and travel teams about phishing that quotes real booking or passport details. Confirm requests only through official airline channels; JAL has a hotline (0120-25-6050 / +81-3-4332-7280) from 2026-10-29. If you are an Amadeus customer, ask Amadeus whether your data was in scope. For staff told their passport data was exposed, follow your identity-protection process.

## Timeline

- 2026-10-28T19:17:20+00:00 analyst

## Documents

- [describes] Japan Airlines (JAL) says Amadeus breach exposed 92k+ booking and 2000 passports https://news.ycombinator.com/item?id=50279029
- [describes] JAL: Unauthorized access to the passenger service system provided by Amadeus https://www.jal.co.jp/ja-jp/news/general/2026/other/261028.html

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_