2026 All Nippon Airways (ANA) — about 37,800 customers' reservations exposed via Amadeus breach; about 1,700 also contact, passport and mileage data
Data compromised
For about 36,100 customers: name, reservation number, travel date, flight segment and cabin. For about 1,700: those fields plus email, phone number, passport number, nationality and mileage number. ANA says no card data or passwords were involved.
Technical writeup
Sourced from Japanese trade-press reports of ANA's announcement; ANA's release was not fetched. Passport counts differ between outlets.
Root cause
ANA says part of its customers' reservation data was viewed from outside through Amadeus's passenger service system. Amadeus detected unauthorised access on September 24, 2026, and told ANA on October 20. ANA announced the incident on October 29 and updated its count on October 30. Amadeus reports no ransomware and no data alteration.