Thai Airways Reports Amadeus Breach Affecting 60,000 Bookings
Thai Airways disclosed a data breach in the Amadeus reservation system affecting over 60,000 passenger bookings between 2023 and 2026. Exposed data includes names, booking references, travel dates, and routes, with a smaller group potentially having passport and contact details compromised. Credit card information was not affected, and the breach occurred in Amadeus systems, not the airline's own infrastructure.
Thai Airways International Public Company Limited announced it received a report from Amadeus IT Group S.A., the provider of its passenger reservation and service system, regarding a security incident involving unauthorized access to booking data stored in Amadeus systems between August 10, 2023 and September 23, 2026. The investigation found that approximately 60,529 passenger records were accessed without authorization, including passenger names, booking reference numbers (PNRs), travel dates, flight routes, and cabin classes. An additional 376 passengers may have had further details exposed, such as email addresses, phone numbers, passport numbers, nationalities, frequent flyer numbers, flight numbers, ticket numbers, and seat assignments. However, the company emphasized that passenger credit card data is stored securely and was not affected. Amadeus confirmed that the compromised credentials used for unauthorized access have been revoked, all affected passwords have been changed, and enhanced monitoring has been implemented to prevent recurrence. The incident has no impact on Thai Airways' systems or operations. The airline takes personal data protection seriously, has notified relevant authorities, and is conducting a detailed review of the data received from Amadeus. Affected passengers will be notified individually once verification is complete. Thai Airways apologizes for any concern and inconvenience caused.
