Singapore Airlines has disclosed that approximately 46,000 booking records may have been affected following a security incident involving Amadeus, its external reservation technology provider. A cybersecurity incident involving a shared airline reservation platform has raised concerns about the safety of passenger information across the global aviation industry.
The airline clarified that its internal IT infrastructure was not compromised. However, passenger information stored in the external booking environment may have been exposed. The incident has also raised concerns for several other international airlines using the same technology provider.
The potentially exposed information includes passenger names, booking reference numbers, travel itineraries and booking classes.
Singapore Airlines further revealed that additional personal information may have been accessed in approximately 620 booking records. This could include email addresses, telephone numbers, travel document details and KrisFlyer membership numbers. However, not every affected booking necessarily contained all these details.
Amadeus confirmed that customers’ bank account information and credit card details were not exposed. The company also stated that existing flight reservations had not been modified during the incident.
Reiterating its position, Singapore Airlines said its internal systems remained secure and that the incident was limited to infrastructure operated by its external technology partner.
The airline has started notifying affected passengers with upcoming travel plans. As a precautionary step, it will also replace booking reference numbers linked to the affected reservations. This measure is intended to reduce risks associated with the possible exposure of booking information. There is no indication that passengers’ travel arrangements were changed because of the incident.
Amadeus stated that it had identified a vulnerability in an environment used to display travel bookings. The weakness may have exposed reservation information processed through its systems. However, the company has not disclosed the total number of customers affected across the airlines using its services.
The incident has also drawn attention to cybersecurity risks associated with shared technology infrastructure in the aviation sector.
Several international airlines, including Cathay Pacific, Japan Airlines, Malaysia Airlines and South Korea’s Asiana Airlines, have reported customer data concerns linked to the Amadeus incident.
Cathay Pacific disclosed that information associated with approximately 53,000 bookings was affected, while Japan Airlines reported that data belonging to around 92,000 customers was involved.
These figures relate to different categories of records and individuals and are not directly comparable.
The incident highlights how security weaknesses in third-party technology platforms can potentially expose passenger information across multiple airlines, even when individual airlines’ internal IT networks remain unaffected.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.