SockAnalystHighBreach · 2026-10-28
Amadeus airline booking breach hits JAL, ANA, Cathay
What happened
Someone used valid system-account credentials to access the Amadeus passenger service system from Aug 10, 2023 to Sep 23, 2026. Korean Air and Asiana are also affected. No card data or passwords.
Who's affected
JAL/JTA ~92,000 customers (passport data for ~2,000); ANA ~37,800 (passport data for ~1,700); Cathay ~53,000 bookings.
✅ Fix / patch
- Warn travelers and execs to rebook only in the airline app, never via email links.
- Review third-party vendor logins: valid creds went unnoticed for 3 years.
🔎 Quick hunt check
Names plus booking codes make airline phishing look legit; tune mail filters for "rebooking" lures.
⏱ CISA deadline
Not in CISA KEV as of Oct 31, 2026.