Japan Airlines has confirmed a significant data breach involving its passenger service system that resulted in the exposure of information for approximately 92,000 customers, as first reported by Bleeping Computer.
The incident originated from unauthorized access to the Amadeus Passenger Service System, which manages reservations and ticketing for the airline. According to the company, the breach occurred between August 10, 2023, and September 23, 2026. While 90,000 customers had reservation codes, names, and flight details exposed, an additional 2,000 individuals also had sensitive information compromised, including passport numbers, email addresses, and frequent flyer data. Japan Airlines stated that credit card numbers and passwords remained secure.
Amadeus, a major IT provider for the global aviation industry, previously identified a vulnerability in its booking display environment. The impact extends beyond Japan Airlines, with other major carriers including All Nippon Airways, Asiana Airlines, and Korean Air also reporting data exposure linked to the same system flaw. Amadeus has since implemented security measures to address the vulnerability. The incident highlights ongoing cybersecurity risks within the travel sector, where attackers frequently target centralized reservation systems to gain unauthorized access to passenger data across multiple global airlines.
Source: Bleeping Computer
