← Finnair

2026 Finnair — Amadeus vendor leak; ~116,000 reservations

2026 116.0K records affected Share on X

Data compromised

About 116,000 Finnair reservations on Amadeus flight lists, counted as bookings not unique people. About 750 opened; 30 tied to Aurinkomatkat. Amadeus told Finnair that credit-card numbers and passwords were not accessed. Finnair issued new reservation numbers for the small set of still-active bookings. Finnair will email customers whose contacts Amadeus supplied. Census of unique passengers unpublished beyond the 116,000 booking figure.

Technical writeup

Official Finnair Cision notice 9 Nov 2026, 15:30 CET. Catalogued as another airline-client row next to JAL, Cathay, SIA, Malaysia Airlines, Korean Air and Asiana. Do not add 116,000 into those other censuses.

Root cause

Amadeus told Finnair that flight lists of several airlines were reached, including about 116,000 Finnair reservations. About 750 of those were opened for examination, including 30 Aurinkomatkat packages. Amadeus says the unauthorised activity has stopped. Finnair systems were not compromised. Amadeus is the controller and has notified an EU data-protection authority. Separate from the Amadeus iHotelier hotel-API row.

References