Airline Data Breach Widens as Singapore Airlines Reports 46,000 Affected Records

The report describes a large supply-chain cybersecurity incident at Amadeus that exposed booking and passenger records for at least 15 airlines between August 2023 and September 2026 (notably JAL ~92,000, Cathay ~53,000, and Singapore Airlines ~46,000). Amadeus has attributed the exposure to a software glitch and/or unauthorized use of system credentials, rolled out fixes and enhanced monitoring, and affected carriers report no evidence of payment data loss though passengers are advised to watch for phishing and to change booking references when instructed.