Breaches · 5h ago
Japan Airlines said a breach at Amadeus’s Passenger Service System exposed data on about 92,000 JAL customers, putting a JAL-specific figure on an incident previously reported to involve records at both JAL and Japan Transocean Air.
The exposed records included names, reservation codes and flight details. For about 2,000 JAL customers, they also included passport and frequent-flyer numbers, email addresses and phone numbers. JAL said credit-card data and flight operations were unaffected. Reservation and itinerary details could make follow-up impersonation attempts more convincing.
Because Amadeus holds reservation data for multiple airlines, a provider-side breach can expose passengers even when an airline’s own systems and operations remain intact. The reporting does not establish access to airline control systems.
2 sources covering this story
Japan Airlines suffers third-party data breach exposing passenger info
Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers.
The Record from Recorded Future
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.
Part of the PlainSec briefing for 2026-10-29