Global travel technology provider Amadeus IT Group experienced an unauthorized data exposure impacting a booking-display environment within its reservation platform. Investigations revealed that unauthorized access via valid administrative credentials occurred across a prolonged window spanning from August 2023 to September 2026, before being contained. Qantas, Japan Airlines, Cathay Pacific, Malaysia Airlines, and Korean Air rushed to audit how many passenger bookings and PNR codes were caught in the breach. Qantas explicitly confirmed that its internal corporate databases and operational flight networks remained completely secure and unaffected by the incident. Both Amadeus and the impacted carriers verified that payment card numbers, banking details, and account passwords were not accessed during the vendor intrusion.

Full report : Software provider Amadeus suffers an extended third-party vendor intrusion, prompting Qantas and other international carriers to audit booking exposures.