Thai Airways reports unauthorised access to passenger records
Sign up now: Get insights on Asia's fast-moving developments
The information potentially accessed included passenger names, booking reference numbers, travel dates, flight routes and cabin classes.
PHOTO: THE NATION/ASIA NEWS NETWORK
- Thai Airways said Amadeus reported unauthorised access to booking data, possibly affecting 60,529 passenger records and 376 more. The data may include names, PNRs, travel details and contact information.
- Thai Airways said credit card details were not affected, and it had found no data disclosure. The airline said its systems and operations were not impacted.
- Amadeus revoked the login credentials, reset affected passwords and strengthened monitoring. Thai Airways has notified regulators and will contact affected passengers after checks are complete.
AI generated
BANGKOK – Thai Airways International issued a statement on Nov 9 after Amadeus IT Group, the provider of its passenger service system, notified it of a cybersecurity incident.
The incident involved unauthorised access to booking data held in Amadeus’ system between Aug 10, 2023, and Sept 23, 2026.
Initial checks indicated that approximately 60,529 passenger records may have been affected.
The information potentially accessed included passenger names, booking reference numbers, travel dates, flight routes and cabin classes.
Approximately 376 additional passenger records may also have been affected.
Alongside the information listed above, these records may have included email addresses, telephone numbers, passport numbers, nationalities, frequent flyer membership numbers, flight numbers, ticket numbers, seat numbers and other related information.
Thai Airways confirmed that passengers’ credit card information was unaffected.
The airline added that it had not identified any disclosure of the data as of the date of the statement.
Amadeus confirmed that it had revoked the login credentials used to gain unauthorised access and reset all affected passwords.
It had also strengthened monitoring, detection and surveillance measures to prevent similar incidents.
Thai Airways also stated that the incident had not affected its systems or operations.
The company stressed the great importance it places on protecting personal data and confirmed that it had notified the relevant regulators.
The airline is continuing to investigate the incident, including a detailed analysis of the data and information supplied by Amadeus.
It will contact affected passengers individually once it has completed the necessary checks and confirmed all relevant details. THE NATION/ASIA NEWS NETWORK