Finnair Announces Data Breach at Amadeus IT Group - TRAICY Global
Finnair has announced a data breach affecting approximately 116,000 passenger bookings after unauthorized access to systems operated by Amadeus IT Group.
The incident occurred in systems operated by Amadeus IT Group, which provides services to Finnair. Of the affected bookings, only about 750 were actually viewed, including 30 related to package tours offered by Aurinkomatkat, a Finnair Group travel brand. Finnair has assigned new booking reference numbers to the affected reservations to prevent further unauthorized access.
Security Response
Timo Arunda, Chief Information Security Officer at Finnair, stated: "We have requested a detailed explanation of this incident from Amadeus. While a detailed investigation is ongoing, Amadeus has already confirmed that there was no access to credit card numbers or passwords. Finnair's systems have not been compromised."
Amadeus, as the data controller for the affected service, has reported the incident to data protection authorities in EU member states in accordance with GDPR. The company is responsible for notifying affected individuals.
Customer Notification
Finnair will contact affected customers by email after receiving their contact information from Amadeus. The airline has also reported the incident to Finland's National Cyber Security Centre. Only a small number of the viewed bookings were valid, according to the companies.
Related
