Thailand tightens aviation cybersecurity after 60,000 passenger data breach - VnExpress International
Thailand has ordered aviation agencies to strengthen cybersecurity following a data breach affecting 60,529 passenger records of Thai Airways and six other Asian airlines.
The National Cyber Security Agency is monitoring potential threats while preparing a coordinated response involving multiple authorities. Investigations and legal action are planned against those responsible for unlawfully accessing personal information.
Data breach details
Thai Airways announced on Nov. 9 that 60,529 passenger booking records may have been accessed through Amadeus IT Group's system. The airline confirmed its own systems and passengers' financial information remained unaffected.
The potentially accessed data included names, booking references, travel dates, flight routes, and cabin classes. Around 376 records may have contained additional personal information like email addresses, phone numbers, passport numbers, and nationalities.
Broader impact
Six other airlines reported similar incidents involving Amadeus: All Nippon Airways, Japan Airlines, Asiana Airlines, Cathay Pacific, Malaysia Airlines, and Singapore Airlines. The hacked booking data was stored by Amadeus between Aug. 10, 2023, and Sept. 23, 2026.
Response measures
Amadeus has disabled the compromised login credentials, reset affected account passwords, and strengthened security monitoring. The Civil Aviation Authority of Thailand has instructed Thai Airways to contact affected passengers and advise them to change passwords and protect their booking information.
Related
