Finnair Reveals 166,000 Bookings Hit in Amadeus Breach
The incident, linked to travel technology provider Amadeus, impacts seven major carriers globally, including Singapore Airlines and Cathay Pacific.
Finnair Discloses Extensive Data Compromise
Finnair has confirmed that at least 166,000 of its customer reservations were compromised in a significant data breach originating from its third-party software vendor, Amadeus. The incident, which affected the airline's booking and flight management systems, reportedly occurred over a period spanning more than three years, from August 2023 to September 2026.
Amadeus, a major supplier of airline technology solutions, began informing affected airlines of the breach in late October 2026. The information accessed included passenger names, booking reference numbers, travel itineraries, and booking classes.
However, Finnair's chief information security officer, Timo Arndal, stated that Amadeus has confirmed that credit card numbers or passwords were not accessed during the breach, and Finnair's internal systems remained secure.
Major Asian Carriers Among Seven Affected
Finnair is the seventh global airline to publicly acknowledge being a victim of the Amadeus data compromise, which has affected at least 344,800 bookings across all named carriers. Several prominent Asian airlines are also impacted.
Singapore Airlines reported 46,000 compromised reservations, Cathay Pacific confirmed 53,000, ANA All Nippon Airways identified 37,800, and Japan Airlines saw 92,000 reservations affected. Additionally, Korean Air and Germany's Condor have also admitted to being victims, though they have not disclosed the specific extent of the information accessed.
Amadeus's Altéa platform, which serves over 130 airlines globally, underpins many critical passenger processes, from booking flights to managing reservations and check-ins.
Response Measures and Industry Vigilance
Following the disclosure, Finnair has initiated a detailed investigation, examining approximately 750 of the compromised reservations. For active bookings among these, the airline has issued new reservation numbers to prevent unauthorised access and has notified the National Cyber Security Center in Finland.
Amadeus has also taken steps to mitigate the breach, including a company-wide password reset to secure its systems.
The broader aviation industry has been on high alert for potential cyber incidents since early 2025, when security experts warned of hacking groups employing 'social engineering' tactics to gain illicit access to airline databases by tricking IT support personnel into providing login credentials.
Traveller Implications and Future Outlook
While Amadeus has assured that highly sensitive financial data was not compromised, the breach still presents a risk to travellers. Access to booking data and passenger names could enable malicious actors to craft convincing phishing scams, attempting to trick individuals into revealing further personal details or installing malware.
Finnair plans to contact all affected passengers directly via email. For Asian travellers, the extensive impact on major regional carriers like Singapore Airlines, Cathay Pacific, ANA, and Japan Airlines means heightened vigilance is necessary.
Passengers should carefully scrutinise any unexpected communications purporting to be from airlines and verify official channels before clicking links or providing information.
Get The Post.
The global travel stories that matter, three mornings a week. Free.
