Singapore Airlines Data Breach: 46,000 Bookings via Amadeus

Singapore Airlines data breach news is trending in Singapore today, Nov 3, 2026. SIA says someone accessed about 46,000 of its booking records. The weak point was not SIA’s own network, though. It sat at Amadeus, a travel-technology firm that runs part of SIA’s booking process. We read SIA’s statement, the other airline notices and the news reports. Here is what happened, who else is hit, and what we can do next.

What the Singapore Airlines Data Breach Exposed

On Nov 3, an SIA spokesperson told media that a third party accessed customer data held on Amadeus’ platform. CNA and Business Times both reported the figures. About 46,000 booking records were affected. They included:

• Customer names
• Booking reference numbers
• Travel itineraries
• Booking classes

For about 620 records, SIA says more data may have been accessed. That includes email addresses, phone numbers, travel document details and KrisFlyer membership numbers. It is a small slice, but it is the most sensitive part.

There is some good news. Amadeus confirmed that no bank account or credit card information was exposed. It also said no bookings were changed. SIA adds that its own IT systems were not breached.

Amadeus Data Breach: What the Company Says

Amadeus is a Spain-based travel technology firm. Its tools serve hundreds of airlines worldwide. In a statement, it said it “became aware of a vulnerability affecting a travel booking display environment.” 7NEWS carried the full statement. Amadeus says it has fixed the issue and improved its monitoring. It also says it has no evidence that payment or financial data was accessed. It sees no sign of ransomware use, and its investigation continues, per the New Straits Times.

The airlines describe the cause a little differently. Cathay Pacific says an unauthorised party used login credentials assigned to an Amadeus system account. It adds that Amadeus reset a password. eSecurityPlanet notes that investigators have not said how the credentials were obtained. Amadeus also did not say how many airlines or customers were hit, CNA reports.

The timeline is wide. Airlines say the breach may cover data processed between August 2023 and September 2026. Zaobao reports that Amadeus told the airlines between Oct 20 and Oct 28.

Which Airlines Face the Amadeus Breach?

SIA is far from alone in this Amadeus data breach. Here is what each carrier has said so far:

• Singapore Airlines: about 46,000 booking records.
• Cathay Pacific (0293.HK): about 53,000 bookings, per its own notice.
• Japan Airlines (9201.T): about 92,000 customers, JAL says. About 2,000 of them had passport and contact details involved.
• ANA: about 37,800 customers, ANA says.
• Malaysia Airlines, Korean Air and Asiana: all say customers may be affected. The reports we read give no counts.

We should not add these numbers together. Some airlines count bookings, and others count customers. One booking can include several travellers.

Another Data Incident for SIA

The Straits Times says this is reportedly SIA’s third data incident since February 2021. That month, a breach at IT firm SITA hit about 580,000 KrisFlyer and PPS members. Their membership numbers and tier status were exposed. In 2022, a phishing attack on SIA’s in-flight retailer KrisShop exposed data on 4,749 customers.

Two of the three cases involved outside tech providers, SITA and Amadeus. We covered SIA’s own warning in our report on a KrisFlyer phishing scam.

What Travellers Should Do After the Singapore Airlines Data Breach

Names and booking references can make a fake message look real. So we should stay alert. Here are steps based on SIA’s own advice:

• Check your inbox. SIA is contacting affected customers with upcoming travel. It will change their booking reference numbers.
• Doubt unexpected messages. SIA’s phishing advisory warns about fake emails, texts, social accounts and calls. Callers can even copy SIA’s caller ID.
• Use official hotlines only. Take them from the SIA website, not from search results or forums.
• Turn on two-factor authentication. SIA offers it for bookings on its website and app.
• Use different passwords on different sites, as the Cyber Security Agency of Singapore advises.

JAL and ANA also asked customers to watch for phishing. For more tips, visit ScamAlert.

What It Means for SIA and Amadeus Investors

Let us look at the market side. SIA (C6L.SI) closed at S$6.88 on Nov 3, up 1.33%, according to StockAnalysis. That close came before the Straits Times published SIA’s statement at 8:51 pm SGT. So Nov 3 trading does not show how investors view this news.

In Madrid, Amadeus shares closed down 1.45% at €58.54 on Nov 3. The Ibex 35 index fell 0.79%, theofficer.es reports. One day does not prove a link to the breach. For background on the company, see our Amadeus earnings preview.

Breach stories often move stocks, but not always. We saw this in our reports on the Rakuten data breach claim and the JR East data breach. Here is what investors may want to watch:

• The findings of Amadeus’ investigation, which is still open.
• More airline disclosures and updated counts.
• Any regulator comment. The Straits Times and Zaobao have asked the Cyber Security Agency and the Personal Data Protection Commission for details.
• Signs of misuse. Cathay and JAL report no evidence of misuse so far.

Costs and penalties are unknown. None of this is a forecast.

Final Thoughts on the Singapore Airlines Data Breach

The Singapore Airlines data breach is serious but limited in what it exposed. No payment data was taken, and SIA’s own systems held firm. Still, about 620 records may include contact and travel document details. That makes phishing the real risk for customers. The Amadeus investigation continues, so figures could change. We will keep watching for updates.

FAQ: SIA Booking Leak and the Amadeus Breach

What happened in the Singapore Airlines data breach?

A third party gained unauthorised access to customer data held on the Amadeus platform, which supports some SIA booking processes. SIA says about 46,000 booking records were accessed. SIA also says its own IT systems were not breached.

What data did the breach expose?

For about 46,000 records, it included names, booking reference numbers, travel itineraries and booking classes. For about 620 records, email addresses, phone numbers, travel document details and KrisFlyer numbers may also have been accessed.

Were bank or credit card details taken?

No. Amadeus confirmed that bank account and credit card information was not exposed. It also said no bookings were changed. Cathay Pacific and Japan Airlines make similar statements about their own customers.

What should SIA customers do now?

Watch for emails and calls from SIA about changing your booking reference. Treat unexpected messages with care, and use only official SIA hotline numbers. Turn on two-factor authentication for your SIA bookings, as SIA advises.

Which other airlines are affected by the Amadeus data breach?

Cathay Pacific, Japan Airlines, ANA, Malaysia Airlines, Korean Air and Asiana have also flagged impacts. Cathay cites about 53,000 bookings. Japan Airlines cites about 92,000 customers, and ANA cites about 37,800.

Did the news move SIA shares?

SIA closed at S$6.88 on Nov 3, up 1.33%. That close came before the Straits Times published SIA’s statement. We cannot yet say how the market will react.

Readers interested in the stock market can check out Meyka, an AI-powered stock research and alternative-data platform. It helps you explore companies with data and research tools. Market outlooks are never guaranteed.

Disclaimer: This article is for informational purposes only and is not financial advice. Always do your own research before you invest.