Cathay Pacific says approximately 53,000 of its booking records were exposed after unauthorised access to a system operated by its travel technology supplier, Amadeus.
The airline said its own systems and flight operations were unaffected. It is investigating the incident and expects to contact affected customers individually once it has established the details.
According to a 30 October report by Sing Tao Headline citing Cathay, the airline was notified by Amadeus on 28 October and received further information the following day confirming that Cathay booking records were involved.
Amadeus told the airline that unauthorised access occurred between August 2023 and September 2026. The affected information mainly consisted of booking reference numbers, passenger names and flight details.
In a smaller number of cases, contact email addresses, telephone numbers, travel document information or frequent flyer membership numbers were also involved. Cathay said there was currently no evidence that financial or payment information had been improperly accessed.
Amadeus has reset passwords and strengthened monitoring and detection measures, according to the report. Cathay said there was no evidence at present that the affected data had been misused, and that it had notified the relevant regulators.
What customers should watch for
Travellers should be alert to messages or calls claiming to be from an airline, particularly those asking them to click a link or provide payment or personal information. A message containing a genuine name or flight detail is not, by itself, proof that the sender is legitimate.
Anyone concerned about a booking can check it through Cathay Pacific’s official website or app, or contact the airline using details obtained independently from its official channels.
