Malaysia Airlines said on Sunday that some customer information may have been affected by a cybersecurity incident involving Amadeus, its reservation-technology provider. The airline joins Cathay Pacific, Japan Airlines, South Korea's Asiana Airlines and others that have reported in recent days that customer data was compromised in the Amadeus breach.

Malaysia's flag carrier said in a statement that the incident may have affected information processed between August 2023 and September this year. It said it is working with Amadeus and relevant parties to investigate the incident and assess its impact. The airline stressed that its own IT systems were not breached and that there was no evidence that financial information had been accessed.

How far the breach reaches

Amadeus said it had become aware of a vulnerability affecting a travel booking display environment, but did not respond to a question about how many customers' data were affected. In recent days Cathay Pacific and Japan Airlines reported that the breach had affected data involving 53,000 bookings and 92,000 customers respectively, giving a sense of the scale across airlines that use the same reservation technology. For passengers, the practical advice remains the same as in any data incident: watch for suspicious messages that use booking details, and contact the airline directly through its official channels if anything looks wrong.