Scams

Malaysia Airlines Data Leak via Amadeus: What Affected Flyers Should Do

The flag carrier says records processed between August 2023 and September 2025 may have been exposed through its booking-system provider, Amadeus.

Ringgit2U · 1 Nov 2026 · 3 min read

Malaysia Airlines aircraft at KLIA boarding gate

What happened1/5
Malaysia Airlines confirms a possible data leak through Amadeus
Malaysia Airlines said on Sunday that some customer information may have been affected by a cybersecurity incident involving Amadeus, its reservation-technology provider.
The airline said the incident may have touched records processed between August 2023 and September 2025. Its own IT systems were not breached, and there was no evidence that financial information had been accessed.
Malaysia Airlines is working with Amadeus and relevant parties to investigate and assess the impact. It urged customers to stay alert for unsolicited messages asking for personal or financial details.
The real numbers2/5
How many records are affected, and what is still unknown
53,000Cathay Pacific bookings affected
92,000Japan Airlines customers affected
Aug 2023 – Sep 2025MA records potentially exposed
Malaysia Airlines has not disclosed how many of its own customers are affected. Amadeus said it became aware of a vulnerability in a travel booking display environment but did not respond to a question on the total number of customers whose data were exposed.
Other carriers have shared their figures. Cathay Pacific reported the breach touched data involving 53,000 bookings. Japan Airlines reported 92,000 customers were affected. South Korea's Asiana Airlines also reported compromised data.
1. 01/02
  How many records are affected, and what is still unknown
  Cathay Pacific bookings affected53,000
  Cathay Pacific bookings affected
How it affects your wallet3/5
The breach itself did not touch your bank account, but scammers may
Malaysia Airlines says there is no evidence that financial information was accessed, so the direct hit to your wallet from this incident appears to be zero. Your credit-card number or bank details have not been confirmed as taken through this route.
The real risk is what comes next. Scammers who obtain names, booking references, flight dates and contact numbers can send messages that look like they come from the airline. e.g. a text saying your KL–Penang flight was cancelled and you need to "re-confirm payment" on a link.
That is how a data leak turns into a money loss. The leak hands the scammer your details; the fake message does the rest.
What to do, step by step4/5
If you flew Malaysia Airlines between Aug 2023 and Sep 2025
1. Treat any unsolicited call, SMS, WhatsApp or email about a cancelled flight, refund or re-booking as suspicious until you verify it yourself.
2. Do not click links or open attachments in those messages. Open the Malaysia Airlines app or go to the official website directly to check your booking status.
3. Never give your IC number, passport number, bank account, card number or one-time password (OTP) to someone who contacted you first.
4. If you already shared personal or financial details, call your bank immediately to freeze the account, then call the National Scam Response Centre at 997.
5. Watch Malaysia Airlines' official channels for updates on the investigation and on what specific data fields were exposed.
1. 92,000
  02/02
  Japan Airlines customers affected
  How many records are affected, and what is still unknown
  Japan Airlines customers affected
Why it matters5/5
One booking-system vulnerability, many airlines exposed
Amadeus is a global reservation-technology provider. Airlines plug their booking and ticketing systems into it, so a vulnerability in Amadeus's travel booking display environment can leak customer records across several carriers at once.
That is why Cathay Pacific, Japan Airlines, Asiana Airlines and now Malaysia Airlines all reported data compromise within days of each other. The breach sits upstream of the airlines, not inside their own servers.
Malaysia Airlines stressed that its own IT systems were not breached. The exposure so far appears to involve customer information processed through Amadeus's booking-display environment. The full scope is still being assessed.

Questions people ask

Did Malaysia Airlines lose my credit-card number in this breach?

Malaysia Airlines said there was no evidence that financial information had been accessed. The airline's own IT systems were not breached. The exposure so far appears to involve customer information processed through Amadeus's booking-display environment. The full scope is still being assessed.

How do I know if my booking was affected?

Malaysia Airlines has not yet published a list of affected bookings. The airline says the incident may have touched records processed between August 2023 and September 2025. Check the airline's official website or app for updates.

What should I do if I get a suspicious message about my flight?

Do not click any link or reply. Open the Malaysia Airlines app or website directly to check your booking. If you suspect a scam, call the National Scam Response Centre at 997 and contact your bank if you already shared financial details.

Source: Malaysiastock.biz

Keep reading

Courier packages stacked on a sorting conveyor belt at a Malaysian distribution centre

Scams

Parcel Shield: 14 firms launch anti-scam shield after 13,045 scam, gambling and prohibited posts found

Parcel Shield launched in Shah Alam with 14 courier and e-commerce firms. MCMC detected 13,045 pieces of content involving scams, gambling and prohibited services; 44 investigation papers opened, 2 charged.

31 Oct 20264 min read