Amadeus breach affecting Asian airlines

Tier B · Patch this week – Put it in the sprint

Who’s exposed: Passengers and staff data at airlines using Amadeus reservation platforms

Tier B because: Exploited in the wild OR public exploit

Reach

Attack

Damage

Fix

Exploited in the wild · Secrets exposed

The Brief

Six Asian airlines, including Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines, have reported data breaches in the past week.
The breaches are traced to an attack on Amadeus IT Group, a Spanish company that builds and maintains flight reservation and ticketing platforms.
The sources do not give the attack date, the data taken, or whether a fix is available.

Why it matters

A single compromised supply-chain provider exposed data at several airlines at once, so any developer whose booking or ticketing systems depend on Amadeus should check its exposure.

The checklist behind the tier

Checklist · 3 of 10 yes

Yes	Hits tech teams	Amadeus builds and runs flight reservation and ticketing platforms used by airlines and travel IT teams.
No	Core infrastructure	A single vendor's enterprise travel platform, not software nearly every engineering team runs.
No	Popular tool	Major travel-industry vendor, but not mainstream developer tech used by many teams.
Yes	Exploited in the wild	The Record: Japan Airlines, Cathay Pacific, Korean Air and others report data breaches traced to Amadeus.
No	Public exploit	No source says exploit code or a proof-of-concept was published.
No	Remote, no login	No source describes the initial access method or whether it needed credentials.
No	Full takeover	Sources report data breaches; none mention code execution, root access or account takeover.
Yes	Secrets exposed	The Record: multiple Asian airlines report data breaches traced back to the Amadeus attack.
No	Supply chain	No source says malicious code was shipped through a package, update or build pipeline.
No	No fix yet	No source says a fix is missing or that the vulnerability remains unpatched.

Timeline

Full coverage · 2 sources

The Record from Recorded Future News
More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus
2d ago ↗
Biz & IT - Ars Technica
Binance says hackers who stole billions in crypto spent months planning heist
2d ago ↗

First seen 2d ago · 2 sources · Full story page · How tiers are decided