50,529 passengers affected, no credit card data stolen
Personal data of 60,529 passengers who booked flights with Thai Airways International (THAI) was compromised during three years of cybersecurity breaches at global travel platform provider Amadeus, the national carrier revealed on Tuesday.
The breaches of the reservation system operated by Amadeus involved the misuse of account credentials and occurred between Aug 10, 2023 and Sept 23 this year.
An investigation showed that 60,529 bookings by THAI passengers were compromised. The hacked data included passengers’ names and reference numbers, travel dates, flight routes and classes of reserved seats, the announcement said.
In 376 of the affected bookings, exposure also included other types of data such as email addresses, phone numbers, passport numbers, nationalities, mileage membership numbers, flight numbers, ticket numbers and seat numbers.
Thai Airways stressed that credit card details were not affected and its own systems and operations remained unaffected.
It said it was verifying information from Amadeus and it apologised for the worry and inconvenience caused.
Other affected users of the Amadeus system included Cathay Pacific, Malaysia Airlines, Singapore Airlines, Japan Airlines, Korean Air, Asiana Airlines and Finnair.
