Data breach exposes personal details of 53,000 Cathay Pacific passengers; other major airlines hit - The Business Times
Hong Kong-listed Cathay Pacific Airways revealed on Friday that travel reservation records of 53,000 passengers were accessed by an unauthorized party through a third-party service provider.
The unauthorized access occurred between August 2023 and September 2026, affecting booking references, passenger names, flight details, and in some cases additional personal information like email contacts, phone numbers, travel documents, and frequent flyer numbers. Cathay Pacific was notified by Amadeus on Wednesday and received further details the following day.
Industry-wide breach
Several other major airlines have disclosed their exposure to the same breach. Korean Air and Asiana Airlines issued alerts on October 23, while JAL Group reported 92,000 affected customers on Wednesday. ANA Holdings revealed around 37,800 passengers' information was leaked, and Jin Air noted 1,454 passengers' data was compromised. German carrier Condor was also affected according to Bloomberg.
Response and investigation
Amadeus confirmed it took actions to contain the incident, including resetting passwords and implementing enhanced monitoring. The airline stressed that no financial or payment information was accessed and that the incident has not affected its systems or operations. Cathay Pacific continues to investigate and will notify affected customers individually once details are established.