Bangkok:Thai Airways has uncovered a significant data breach within its Amadeus reservation system, impacting more than 60,000 transactions.
According to Thai News Agency, the breach was discovered following a notification from Amadeus IT Group SA, which provides reservation and passenger services. Unauthorized access to booking data stored in Amadeus's system occurred between August 10, 2023, and September 23, 2026.
The breach affected approximately 60,529 entries, including passenger names, booking reference numbers (PNRs), travel dates, flight routes, and class of service. Additionally, 376 entries may contain further information such as email addresses, phone numbers, passport numbers, nationality, frequent flyer numbers, flight details, ticket information, and seat numbers.
Thai Airways has confirmed that credit card information was not compromised. The incident was isolated to the Amadeus system and did not affect Thai Airways' systems, flight operations, or services.
In response, Amadeus has deactivated user accounts linked to the unauthorized access, updated passwords for the affected accounts, and enhanced system monitoring and surveillance to prevent future breaches.
Thai Airways has reported the incident to the relevant authorities and is collaborating with Amadeus to investigate further. Affected passengers will be individually notified once their information is verified. Thai Airways has expressed regret for any concern and inconvenience caused by this incident.