“There is no impact to Qantas systems or databases, which remain secure,” a Qantas spokesperson confirmed after a global travel technology provider suffered an unauthorized access breach affecting major international airlines.
Amadeus System Breach Affects Global Airlines
Spanish travel technology company Amadeus provides services including artificial intelligence (AI) and biometrics to more than 400 airlines, hotels, and car hire companies worldwide. The unauthorized access occurred between August 2023 and September 2026, according to Cathay Pacific. Amadeus services were targeted by an unauthorized agent, compromising passenger reservations and booking information across multiple carriers.
Qantas confirmed that it was notified by Amadeus about the incident, which was contained in September. The Australian airline stated that it is currently working with the technology provider to determine the exact impact on any Qantas bookings. Amadeus reported that no payment records or financial data were accessed during the breach, and Qantas confirmed that it has notified the Australian Cyber Security Centre and the Office of National Cyber Security.
Airlines report varying impacts from security incident
Cathay Pacific stated that Amadeus informed them about approximately 53,000 of the Hong Kong-based airline’s bookings were affected by the unauthorized access. Malaysia Airlines also reported that some customer information may have been breached, according to Reuters. Meanwhile, Air New Zealand stated that it did not believe it was impacted at this stage.
Other carriers reported no internal system compromises resulting from the incident. Logon Software Asia Group noted on LinkedIn that Korean Air and Asiana explicitly found no indications that their own internal databases were compromised. Logon also pointed out that none of the affected airlines reported breaches of their own internal databases, raising broader industry questions about supply chain security and third-party data access management.
Amadeus implements security measures following breach
Amadeus has taken direct steps to address the unauthorized access within its infrastructure. Cathay Pacific noted that Amadeus confirmed actions to contain the incident, including a password reset. The technology vendor also implemented enhanced monitoring and detection capabilities across its systems.
To date, Amadeus has not identified any evidence that the accessed data has been misused. Qantas and other affected carriers continue to coordinate with the technology provider.
Amadeus suffers security breach affecting airline reservations
Which travel technology company suffered the security breach?
Spanish travel technology provider Amadeus experienced the unauthorized access incident between August 2023 and September 2026, affecting reservation data for multiple airlines.
Were financial records or payment details exposed in the incident?
Amadeus reported that there is no evidence any payment records or financial data were accessed during the unauthorized access.
Which airlines have confirmed an impact on their bookings?
Cathay Pacific stated that roughly 53,000 of its bookings were affected, and Malaysia Airlines reported potential customer information breaches. Qantas, Japan Airlines, ANA, Cathay Pacific and Korean Air were also listed as impacted carriers.