BANGKOK – Hackers breached the global reservation network of technology provider Amadeus, improperly accessing travel information for 60,529 Thai Airways customers. Thai Airways International confirmed the significant cybersecurity exposure on Tuesday after an extensive technical review revealed compromised booking entries spanning three years.
The unauthorized digital infiltration targeted account credentials within the third-party reservation architecture between August 2023 and September 2026. Airline officials quickly assured the traveling public that malicious intruders did not compromise any credit card details or payment processing databases.
Key Takeaways• Amadeus reservation system breach exposed booking references, routes, and passenger names for 60,529 Thai Airways customer files. • A targeted subset of 376 records suffered deeper exposure, potentially revealing passport numbers, phone contacts, and email addresses. • Financial data and credit card details remained completely untouched, while Thai Airways continues operating scheduled flights without interruption. |
How the Amadeus System Breach Unfolded
Technology vendor Amadeus powers passenger reservation architecture across major global airline alliances, handling flight scheduling, seat reservations, and ticketing operations daily. According to direct corporate updates from Thai Airways, cybercriminals exploited credential access to tap reservation data without entering internal airline servers.
The incident stemmed from misused system credentials rather than direct structural penetration of the national flag carrier’s internal booking databases. Amadeus identified the irregular network requests, shut down the affected system account immediately, and revoked all active authentication certificates across the platform.
The broad majority of the 60,529 affected booking files contained standard operational information routinely logged during routine flight reservations worldwide. Intruders obtained passenger legal names, Passenger Name Record (PNR) codes, scheduled departure dates, departure and arrival airports, and reserved travel cabin tiers.
A far smaller pool of 376 passenger files suffered severe data leaks, exposing highly confidential travel identity materials to unknown third parties. These high-risk files revealed traveler passport numbers, direct email addresses, telephone contacts, frequent flyer account numbers, assigned seat selections, and specific electronic ticket numbers.
Aviation regulators confirmed that flight safety controls remained unaffected, allowing standard flight schedules to proceed without administrative cancellations or operational ground delays. Customers can verify whether their recent flights fall into the compromised window by consulting updates published by Bangkok Post and aviation reporting networks.
Security Containment and Airline Remediation Steps
Following confirmation of the unauthorized data access, Amadeus deployed upgraded security patches and introduced continuous heuristic monitoring across its cloud-based distribution architecture. Technical teams immediately reset all administrative account passwords to block repeat attempts by unauthorized actors seeking entry through secondary gateways.
Thai Airways notified Thailand’s personal data regulators and national cybersecurity incident coordination authorities to comply fully with mandatory disclosure requirements. The carrier also committed to reaching out directly to affected passengers through individualized electronic mail notifications outlining protective options.
Cybercriminals regularly weaponize compromised PNR reference numbers and flight itineraries to construct convincing social engineering and spear-phishing campaigns against travelers. Deceptive emails frequently imitate customer service representatives, urging fliers to settle phantom cancellation fees or confirm ticket adjustments via urgent web links.
Legitimate airlines never demand emergency wire transfers, debit card verifications, or passport uploads through unsolicited text messages or sudden messaging notifications. Travelers must inspect the sender address domain carefully and navigate directly to official airline booking portals instead of clicking email links.
Passengers who booked flights during the affected timeframe should promptly monitor their email boxes, update loyalty program passwords, and enable multi-factor authentication. Vigilant travelers will review bank records regularly, report suspicious booking notifications immediately to law enforcement, and verify flight changes through verified airline call centers.
Trending News:
Thai Airways Make Emergency Landing Over Cracked Windshild
How Thailand’s Data Breaches Put Digital Government at Risk
