Thai Airways International

Summary

Thai Airways International disclosed that personal data of 60,529 passengers was compromised during security breaches at global travel platform provider Amadeus. The exposed information included names, reference numbers, travel dates, flight routes, and reserved seat classes, with a smaller subset of 376 bookings also revealing email addresses, phone numbers, passport numbers, nationalities, mileage membership numbers, flight numbers, ticket numbers, and seat numbers. Credit card details were not affected, and the airline stated its own systems and operations remained unaffected. Other Amadeus users, including several international carriers, were also impacted by the credential misuse.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Thai Airways International disclosed that personal data belonging to 60,529 passengers who booked flights with the airline was compromised during cybersecurity breaches at Amadeus, the global travel platform provider that operates the carrier's reservation system. The breaches involved the misuse of account credentials and occurred between August 10, 2023, and September 23, 2026. The compromised information included passengers' names and reference numbers, travel dates, flight routes, and classes of reserved seats. In 376 of the affected bookings, additional data elements were exposed, including email addresses, phone numbers, passport numbers, nationalities, mileage membership numbers, flight numbers, ticket numbers, and seat numbers. Thai Airways emphasized that credit card details were not affected by the incident. The airline also stated that its own systems and operations remained unaffected throughout the period. The disclosure came as part of a broader set of compromises involving other Amadeus users, including Cathay Pacific, Malaysia Airlines, Singapore Airlines, Japan Airlines, Korean Air, Asiana Airlines, and Finnair.

Thai Airways said it was verifying information received from Amadeus regarding the scope and nature of the exposed data. The airline issued an apology for the worry and inconvenience caused to affected passengers. No evidence was provided in the disclosure indicating that Thai Airways' internal networks had been breached, as the intrusion was confined to the third-party reservation environment operated by Amadeus. The credential misuse occurred over a period extending from August 2023 to September 2026. Affected passengers had their travel itineraries and personal identifiers exposed, with the larger group facing exposure of core booking details and the smaller group facing exposure of more sensitive identity and contact information. The airline did not disclose the number of affected passengers by individual airline partner in its statement.

Sources

Sources available to members: 1 source.