--- title: Japan Airlines suffers third-party data breach exposing... description: Japan Airlines disclosed a data breach at Amadeus's Passenger Service System affecting about 92,000 customers. Amadeus notified JAL on October 23, 2026 that... canonical: https://daily.dev/posts/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info-krlpbljki twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Japan Airlines suffers third-party data breach exposing passenger info | daily.dev og:description: Japan Airlines disclosed a data breach at Amadeus's Passenger Service System affecting about 92,000 customers. Amadeus notified JAL on October 23, 2026 that... og:url: https://daily.dev/posts/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info-krlpbljki og:image: https://api.daily.dev/og/posts/kRlPBLJkI.png og:image:alt: Japan Airlines suffers third-party data breach exposing passenger info og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Japan Airlines suffers third-party data breach exposing passenger info **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Japan Airlines disclosed a data breach at Amadeus's Passenger Service System affecting about 92,000 customers. Amadeus notified JAL on October 23, 2026 that unauthorized access occurred between August 10, 2023 and September 23, 2026. For roughly 90,000 customers, attackers accessed reservation codes, names, flight dates, routes and travel classes. About 2,000 more also had emails, phone numbers, passport numbers, nationalities, frequent flyer numbers and ticket details exposed. JAL says credit card numbers and passwords were not compromised. All Nippon Airways reportedly announced a related customer data breach according to local media, and Asiana Airlines and Korean Air have confirmed impact from the Amadeus flaw. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What data was exposed in the Japan Airlines Amadeus breach? For about 90,000 Japan Airlines customers, attackers accessed reservation codes (PNRs), names, flight dates, routes and travel classes. An additional 2,000 customers also had their email addresses, phone numbers, passport numbers, nationalities, frequent flyer numbers, and flight, ticket and seat numbers exposed. Credit card numbers and passwords were not compromised. _Teams assessing vendor breach exposure can follow incident disclosures like this one on daily.dev._ ### Which other airlines were affected by the Amadeus data breach? All Nippon Airways (ANA), Asiana Airlines and Korean Air have all confirmed customer data impact tied to the same Amadeus vulnerability that hit Japan Airlines. Amadeus had disclosed a flaw in its travel booking display environment on October 1, 2026, initially saying it had not been exploited by ransomware actors, though it was later confirmed to have been maliciously exploited. _daily.dev helps engineers tracking multi-airline fallout from shared vendor vulnerabilities stay current._ ### How long was unauthorized access to Amadeus systems happening before it was detected? Amadeus told Japan Airlines that unauthorized access to its Passenger Service System occurred between August 10, 2023 and September 23, 2026, more than three years, before the airline was notified on October 23, 2026. Amadeus is used by over four hundred airlines, 210 airport operators, 34 cruise and ferry lines, and 2 million hotels. _Those evaluating third-party vendor risk timelines can follow breach disclosures like this on daily.dev._ ## Similar posts on daily.dev - [Aflac Japan Data Breach Impacts 4.38 Million Customers and Agents](https://daily.dev/posts/aflac-japan-data-breach-impacts-4-38-million-customers-and-agents-qvipd127b) · Security Boulevard · 0 upvotes · 0 comments - [Brute-Forceable Airline Reservation API Left Millions of Passenger Records Vulnerable](https://daily.dev/posts/brute-forceable-airline-reservation-api-left-millions-of-passenger-records-vulnerable-egg31qpgn) · Hacker News · 0 upvotes · 0 comments - [Eurail says December data breach impacts 300,000 individuals](https://daily.dev/posts/eurail-says-december-data-breach-impacts-300-000-individuals-lutonsrih) · BleepingComputer · 0 upvotes · 0 comments - [Japan steps up cyber warnings as data leaks hit millions of customers](https://daily.dev/posts/japan-steps-up-cyber-warnings-as-data-leaks-hit-millions-of-customers-2lgobk3hn) · The Next Web · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info-krlpbljki) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Japan Airlines suffers third-party data breach exposing passenger info","url":"https://daily.dev/posts/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info-krlpbljki","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info-krlpbljki"},"datePublished":"2026-10-29T22:11:50.367Z","dateModified":"2026-10-29T23:27:37.177Z","description":"Japan Airlines disclosed a data breach at Amadeus's Passenger Service System affecting about 92,000 customers. Amadeus notified JAL on October 23, 2026 that...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f1f4d401b924ef50c92bf1fca70c6892?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f1f4d401b924ef50c92bf1fca70c6892?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info-krlpbljki","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,data-breach","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Japan Airlines suffers third-party data breach exposing passenger info"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info-krlpbljki#faq","mainEntity":[{"@type":"Question","name":"What data was exposed in the Japan Airlines Amadeus breach?","acceptedAnswer":{"@type":"Answer","text":"For about 90,000 Japan Airlines customers, attackers accessed reservation codes (PNRs), names, flight dates, routes and travel classes. An additional 2,000 customers also had their email addresses, phone numbers, passport numbers, nationalities, frequent flyer numbers, and flight, ticket and seat numbers exposed. Credit card numbers and passwords were not compromised. Teams assessing vendor breach exposure can follow incident disclosures like this one on daily.dev."}},{"@type":"Question","name":"Which other airlines were affected by the Amadeus data breach?","acceptedAnswer":{"@type":"Answer","text":"All Nippon Airways (ANA), Asiana Airlines and Korean Air have all confirmed customer data impact tied to the same Amadeus vulnerability that hit Japan Airlines. Amadeus had disclosed a flaw in its travel booking display environment on October 1, 2026, initially saying it had not been exploited by ransomware actors, though it was later confirmed to have been maliciously exploited. daily.dev helps engineers tracking multi-airline fallout from shared vendor vulnerabilities stay current."}},{"@type":"Question","name":"How long was unauthorized access to Amadeus systems happening before it was detected?","acceptedAnswer":{"@type":"Answer","text":"Amadeus told Japan Airlines that unauthorized access to its Passenger Service System occurred between August 10, 2023 and September 23, 2026, more than three years, before the airline was notified on October 23, 2026. Amadeus is used by over four hundred airlines, 210 airport operators, 34 cruise and ferry lines, and 2 million hotels. Those evaluating third-party vendor risk timelines can follow breach disclosures like this on daily.dev."}}]} ```