350,000 SAS passengers may have had details leaked in major data breach - The Local Europe
Scandinavian Airlines (SAS) has reported a major data breach potentially exposing booking details of 350,164 passengers, with the incident traced to the global travel reservation system Amadeus.
The breach primarily involves older bookings and completed journeys, with compromised information including booking references, dates, passenger headcounts, and other flight-related details. SAS has reported the incident to the Swedish Authority for Privacy Protection (IMY) as required by law.
Industry Impact
Finnair has also confirmed that approximately 116,000 of its flight reservations may have been compromised. The breach extends beyond these carriers, affecting several international airlines that use the Amadeus platform.
SAS is aware of the security incident reported by Amadeus and has been informed that certain booking information linked to SAS has been affected.
Ongoing Investigation
According to Norwegian broadcaster NRK, unauthorized parties may have had access to records within the Amadeus booking system for as long as three years. The airline has not yet notified affected passengers individually, stating this decision could change if new information emerges.
SAS has confirmed that "the necessary reports to the relevant supervisory authorities" have been submitted, though the full extent of the data exposure and potential consequences remain under investigation.
Related
