Kuala Lumpur, Nov. 2 – Malaysia Airlines announced on Sunday that some customer information may have been affected by a cybersecurity incident involving Amadeus, its reservation-technology provider. The national flag carrier confirmed that the Amadeus breach could impact data processed between August 2023 and September 2026, highlighting potential exposure of airline customer data over an extended three-year period for affected travelers worldwide.
The Malaysia Airlines data breach notification emphasizes that the airline’s own IT systems were not compromised. There is currently no evidence that financial information was accessed during the Amadeus cybersecurity incident, providing some reassurance to passengers regarding payment details and banking data security measures in place.
Malaysia Airlines is collaborating with Amadeus and relevant parties to thoroughly investigate the cybersecurity breach and assess its full impact on customer records. The company treats the matter with utmost seriousness, prioritizing the privacy and protection of customer information processed through the third-party reservation system.
As a precautionary measure, Malaysia Airlines urges customers to remain vigilant against suspicious or unsolicited communications, especially those requesting personal or financial information. This Amadeus-related incident joins similar reports from other airlines, underscoring the importance of monitoring for phishing attempts following the travel technology provider’s vulnerability in its booking display environment.