2026 Malaysia Airlines — customer information processed through Amadeus may be exposed; airline says its own systems were not breached
Data compromised
Not specified. The airline has not listed the data fields or the number of customers affected. It warns customers to be wary of unsolicited messages asking for personal or financial information.
Technical writeup
The Record's roundup lists Malaysia Airlines with the other Amadeus-affected carriers. The Rakyat Post reports stolen administrative logins and a 37-month exposure window. Other outlets do not corroborate those details, so they are not included here.
Root cause
Malaysia Airlines says a security incident at its reservation provider, Amadeus, may have exposed customer information processed between August 2023 and September 2026. Amadeus describes a vulnerability in a travel booking display environment. The airline says its own systems were not breached and it has seen no evidence that financial data was accessed. Reports differ on the date of the airline statement (October 31 or November 1). The separate February 2026 Qilin claim against Malaysia Airlines is covered in its own row.