Amadeus passenger system breach exposes booking data of about 92,000 JAL customers, 2,000 with passport numbers
Teaser from the source
Japan Airlines and Japan Transocean Air disclosed on Oct 28 2026 that Amadeus IT Group, which runs their passenger service system for reservations, ticketing and check-in, told them on Oct 23 that an unauthorized access to its system exposed part of their reservation records from Aug 10 2023 to Sep 23 2026. About 92,000 customers are affected: about 90,000 had their booking code, name, flight date, route and class viewed, and about 2,000 also had email, phone, passport number, nationality, frequent flyer number, ticket and seat numbers viewed. No card numbers or passwords leaked. Amadeus says it has completed security measures. ANA, also an Amadeus customer, says it was notified and is still checking.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on passenger
Other advisories
- Highosv:MAL-2026-7065Malicious code in @datatrain/passenger (npm)
- Not ratedosv:MAL-2026-3802Malicious code in @datatrain/passenger-v3 (npm)
- HighCVE-2025-26803Phusion Passenger denial of service
- HighCVE-2025-26803Phusion Passenger: Verwendung nicht initialisierter Ressourcen
- HighCVE-2025-26803Phusion Passenger: Verwendung nicht initialisierter Ressourcen
- CriticalCVE-2024-49322Fehlerhafte Berechtigungszuweisung-Schwachstelle im CodePassenger Job Board Manager für WordPress jemployee ermöglicht die Erhöhung von Privilegien.
- CriticalCVE-2024-49322Schwachstelle bei fehlerhafter Rechtezuweisung in CodePassenger Job Board Manager for WordPress jemployee ermöglicht Rechteausweitung.
- CriticalCVE-2024-49322Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress jemployee allows Privilege Escalation.This issue affects Job Bo…
Other news entries
- 220 million traveler records exposed in Vietnam-linked APIS leakNewsBleepingComputer
- Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendeesNewsBleepingComputer
- Delta Wi-Fi Blocked and Spoofed on Flight from LAS to ATLNewsSANS NewsBites
- Collins Aerospace MUSE ransomware knocks out check-in at Heathrow, Brussels and BerlinBreachpwn.watch
Source: https://pwn.watch/i/amadeus-passenger-system-breach-jal-92k-customers-oct-2026