Cathay Pacific has announced that a system operated by Amadeus IT Group, which provides services to the airline, was subject to unauthorized access, resulting in reservation information being viewed. The airline was notified on October 28 and received a detailed report the following day.
The unauthorized access was carried out using login credentials assigned to an Amadeus system account, and occurred between August 2023 and September 2026.
Approximately 53,000 reservations associated with the airline were affected. In most cases, reservation numbers, passenger names, and flight information were viewed. In some cases, email addresses, telephone numbers, travel documents, and frequent-flyer membership numbers may also have been viewed.
There is no evidence that financial or payment information was viewed. Amadeus has implemented containment measures, including password resets, and strengthened its system monitoring and detection capabilities. It said there is currently no evidence that the affected data has been misused.
There has been no impact on Cathay Pacific’s systems or flight operations. The airline has reported the matter to the relevant authorities and is continuing its investigation, including an analysis of data provided by Amadeus. It said it will individually notify affected customers once further details are known.
