2026 Finnair — Amadeus vendor leak; ~116,000 reservations
Data compromised
About 116,000 Finnair reservations on Amadeus flight lists, counted as bookings not unique people. About 750 opened; 30 tied to Aurinkomatkat. Amadeus told Finnair that credit-card numbers and passwords were not accessed. Finnair issued new reservation numbers for the small set of still-active bookings. Finnair will email customers whose contacts Amadeus supplied. Census of unique passengers unpublished beyond the 116,000 booking figure.
Technical writeup
Root cause
Amadeus told Finnair that flight lists of several airlines were reached, including about 116,000 Finnair reservations. About 750 of those were opened for examination, including 30 Aurinkomatkat packages. Amadeus says the unauthorised activity has stopped. Finnair systems were not compromised. Amadeus is the controller and has notified an EU data-protection authority. Separate from the Amadeus iHotelier hotel-API row.