Malaysia Airlines said on Sunday that some customer information may have been affected by a cybersecurity incident involving Amadeus, its reservation-technology provider, Reuters reported. Malaysia's flag carrier said in a statement that the incident may have affected information processed between August 2023 and September this year, and that it is working with Amadeus and relevant parties to investigate the incident and assess its impact.

Source: Reuters via The Business Standard

The airline joins Cathay Pacific Airways, Japan Airlines and South Korea's Asiana Airlines, among others, which have reported in recent days that customer data was compromised in the Amadeus breach. In recent days Cathay Pacific and Japan Airlines reported that the breach had affected data involving 53,000 bookings and 92,000 customers, respectively. Malaysia Airlines has not given a corresponding figure of its own.

Source: Reuters via Business Today Malaysia

Aug 2023 – Sep 2026Period whose processed customer information may have been affected, the airline said
53,000Bookings in the Cathay Pacific disclosure linked to the same Amadeus breach
92,000Customers in the Japan Airlines disclosure linked to the same breach

Malaysia Airlines said its IT systems were not breached and there was no evidence that financial information had been accessed. It encouraged customers to remain vigilant against suspicious or unsolicited communications, particularly those requesting personal or financial information — the kind of phishing risk that follows a booking-data exposure, Malaysian outlet Scoop reported in its own coverage of the advisory.

Source: Scoop (Malaysia)

What is solid

  • Malaysia Airlines said on Sunday that customer information processed through Amadeus between August 2023 and September 2026 may have been affected
  • The airline said its own IT systems were not breached and there was no evidence financial information had been accessed
  • Amadeus said it had become aware of a vulnerability affecting a travel booking display environment

What is only claimed

  • How many Malaysia Airlines customers were affected — the airline gave no number, and Amadeus did not respond to a question about how many customers' data had been affected in total
  • Exactly what kinds of customer information were exposed in the Malaysia Airlines case — not specified in the airline's statement reported so far

Amadeus, the Spanish travel-technology group whose systems handle reservations for airlines around the world, is the common link in the disclosures: a vulnerability in a booking display environment, rather than a breach inside each airline, is what the companies describe. For Punjabi and Indian travellers — who fly Malaysia Airlines and the other named carriers heavily on routes between Canada, India and Southeast Asia — the practical step is the airline's own advice: treat unexpected messages asking for personal or financial details with suspicion, and check bookings only through the airline's official channels. What happens next is the investigation with Amadeus: whether a Malaysia-specific customer count and a list of the data involved are disclosed.