AI summary
Summary of article:
Thai Airways confirmed that due to the Amadeus security incident, data of approximately 60,529 passengers may have been accessed without authorization. The Thai government immediately demanded airline operators to strengthen security protections and inform affected passengers.
Thailand The airline recently confirmed that a security incident had occurred at third-party systems provider Amadeus, and approximately 60,529 passenger reservation records may have been accessed without authorization. In response, Thailand’s Ministry of Transportation required aviation agencies and service providers to strengthen information security protections.
Thai Airways issued a statement on November 9 saying it had received notification from passenger service system provider Amadeus that unauthorized access to its systems had occurred between August 10, 2023, and September 23, 2026.
Earlier, Malaysia Airlines, Cathay Pacific, Japan Airlines and South Korea’s Asiana Airlines also reported that customer data may have been leaked due to the Amadeus hack. Malaysia Airlines said in a statement on November 1 that the incident could affect data processed through relevant systems between August 2023 and September this year.
Thai Airways said in a statement that a preliminary investigation found that information on approximately 60,529 passengers was obtained without authorization, including passenger names, booking codes, travel dates, flight routes and cabin classes.
The statement said: “Approximately 376 records may also include email addresses, phone numbers, passport numbers, nationalities, membership numbers, flight and ticket numbers, seat numbers and other information.” However, Thai Airways assured passengers that credit card information would not be affected.
In addition to Thai Airways, at least six other Asian airlines have been involved in similar security incidents involving the Amadeus system, according to information provided by the Civil Aviation Authority of Thailand (CAAT), The Nation reported today. Thai Airways is asked to contact affected passengers as soon as possible and remind them to change their login passwords and modify relevant reservation information to strengthen passenger data security.
Siripong Angkasakulakiat, deputy minister of Thailand’s Ministry of Transport, said that although the Thai Airways incident involved attacks on private enterprise systems, the Ministry of Transport has called on all relevant agencies to strengthen the security of stored public information.
“Organizations have also been directed to strengthen the security management of access credentials and use technology to detect illegal activities,” Siriporn said.
Thailand’s Ministry of Digital Economy and Society said recent aviation industry information security incidents have been unprecedented in scale, and the government is preparing to coordinate the response with the National Security Council and the National Information Security Bureau.
Summary FAQ
-
Thai Airways’ preliminary investigation revealed that approximately 60,529 passenger data may have been accessed without authorization, including basic booking information such as name, booking code, date of travel, route and cabin.
-
The incident arose from a security incident involving passenger service system provider Amadeus. After receiving the notification, Thai Airways confirmed that unauthorized access to the system had occurred within a specified period, and that Thai Airways itself was not alone in the attack.
-
Thailand’s Ministry of Transportation requires relevant agencies to strengthen the security of stored public information, improve the security management of access credentials, detect illegal activities through technology, and contact affected passengers as soon as possible for follow-up.
