All Nippon Airways (ANA) announced that a system operated by Amadeus IT Group, its passenger service system provider, was subject to unauthorized access, with evidence indicating that some of ANA’s reservation information was viewed.
The incident affects approximately 37,800 customers who made reservations with ANA between August 10, 2023, and September 23 of this year.
For approximately 36,100 of these customers, there is evidence that their names, reservation numbers, flight dates, flight sectors, and travel classes were viewed. For approximately 1,700 customers, the information may also include email addresses, telephone numbers, passport numbers, nationalities, mileage account numbers, airlines, flight numbers, ticket numbers, and seat numbers. Credit card information and passwords were not included.
Amadeus detected unauthorized access to airline reservation information on September 24, but ANA said it was not notified at that time. On October 16, after learning that unauthorized access had been confirmed at other airlines using Amadeus, ANA asked the company whether its own flight reservation information had been accessed without authorization. On October 20, ANA received a report from Amadeus that unauthorized access had been detected and reported the matter to relevant parties, including Japan’s Personal Information Protection Commission. On October 30, ANA identified the number of people who may have been affected.
Amadeus has confirmed that it has already invalidated the relevant credentials and strengthened its monitoring system, that no evidence of ransomware damage or data tampering or deletion has been found, and that there has been no interruption to the services it provides.
ANA plans to contact affected customers in stages beginning next week and warn them to be cautious of suspicious emails, phone calls, websites, and social media advertisements impersonating the ANA Group.
Notice
This article was generated using automatic translation by GPT-4 API. The translation may not be accurate.
