Qantas, Cathay Pacific caught in Amadeus booking breach
Amadeus systems had a three-year breach. It exposed airline bookings, including those for Qantas and Cathay Pacific.
Qantas and Cathay Pacific are among at least six major airlines hit by a cyber breach at Amadeus IT Group. Amadeus is a global travel technology platform used by hundreds of airlines, hotels and car hire companies.
Cathay Pacific said about 53,000 customer bookings were affected by unauthorized access to Amadeus systems. Korean Air, Asiana, Japan Airlines, ANA and Malaysia Airlines have also been hit.
The breach lasted three years, from August 2023 to September 2026, when Amadeus stopped it. Qantas said its systems and databases remain secure.
Amadeus reset passwords and added better monitoring. So far, no exposed data has been misused.
But the breach raises important questions about supply chain security and how airlines rely on outside systems.
- August 2023 to September 2026
- Breach duration
- 53,000
- Cathay Pacific bookings exposed
- 6 major carriers
- Airlines known affected
- None so far
- Data misuse detected
Why it mattersAirlines hold sensitive customer information and payment details. A breach this long puts millions of travelers at risk of identity theft or fraud. This is true even if the data has not yet been misused.
AustraliaQantas is Australia's largest airline and many Australians book through Cathay Pacific; travellers with recent bookings may have exposed personal and payment information, and should monitor accounts and watch for fraud alerts.
✓ Claims checked against the source and corrected before publish. checked 4 h ago
