Malaysia Airlines says an Amadeus cybersecurity incident may have affected some customer information processed between August 2023 and September 2026.
In its October 31 advisory, the airline says its own IT systems were not compromised and it has no evidence that financial information was accessed.
Investigation and customer advice
The carrier is working with Amadeus to assess the impact. Its notice gives no affected-customer total or list of exposed data fields.
Customers are advised to watch for unexpected messages seeking personal or financial details. Further updates will follow as information becomes available.
Read Malaysia Airlines’ dated advisory. Figures and findings in Cathay’s separate disclosure should not be applied to Malaysia Airlines.
See also the JAL/JTA and other Japanese airlines’ reservation-data notices. Their disclosed information and customer totals belong to those airlines and do not establish the scope of Malaysia Airlines’ incident.
