Thailand’s aviation regulator confirmed that only Thai Airways and Bangkok Airways were affected by a data breach involving the Amadeus reservation system, after investigating seven major airlines.
Earlier this week, Thai Airways announced that information on around 60,529 passengers stored in the reservation system had been exposed following unauthorised access. The system is operated by Amadeus IT Group SA.
The airline said it was notified by Amadeus that the unauthorised access affected information covering the period from August 10, 2023, to September 23, 2026.
The exposed information included passenger names, passenger name records (PNRs), travel dates, flight routes, ticket classes, email addresses, telephone numbers, passport numbers, nationalities and frequent flyer membership numbers.
Flight numbers, ticket numbers, seat numbers and other related information were also among the data potentially affected.
Thai Airways said passengers’ credit card information was not compromised.
Bangkok Airways subsequently confirmed that it was also affected by the unauthorised access to Amadeus. However, the airline did not disclose how many passengers were involved.
The airline said the situation had been brought under control and that it was working with Amadeus to investigate the incident. It also confirmed that passengers’ financial information had not been affected.
Bangkok Airways advised passengers to be cautious about unexpected communications requesting personal or financial information. It urged anyone unsure about the legitimacy of a message to contact the airline directly.
Following the two announcements, CAAT said it had reviewed the incident and its impact on the country’s seven main airlines. Its findings indicated that only Thai Airways and Bangkok Airways used the affected Amadeus services.
CAAT said there was currently no evidence that passenger information had been used for unlawful purposes. The regulator is conducting a further review and analysis of the information received from Amadeus and said it would notify affected passengers individually once the relevant details had been confirmed.
The regulator also assured passengers that the incident had not affected flight safety or airline operations. It said it would continue monitoring airlines’ personal data protection measures and cybersecurity practices.
Similar news
- Thai Airways apologises for Suvarnabhumi cargo backlog, promises fixes
- Thai Airways Boeing returns to Shanghai after cockpit window damage
- Affected Thai Airways passengers can now apply for compensation
- Bangkok Airways breach may have compromised customer data
The story CAAT says only 2 from 7 main Thai airlines affected by data breach as seen on Thaiger News.