Amadeus incident affects 53,000 Cathay bookings

Cathay Pacific said its systems and operations were unaffected.

Unauthorized access to reservation data held by third-party technology provider Amadeus affected around 53,000 Cathay Pacific bookings.

Cathay said in a media statement that the unauthorized access occurred between August 2023 and September 2026.

Cathay was notified of the incident by Amadeus on October 28 and received further information the following day.

According to Amadeus, an unauthorized party used login credentials assigned to one of its system accounts to access travel-reservation data, including records relating to Cathay passengers.

The information accessed in most cases included booking references, passenger names and flight details.

A smaller group of affected records may also have included email addresses, telephone numbers, travel-document information or frequent-flyer numbers.

Cathay said there was no evidence that financial or payment information had been accessed.

Amadeus has reset the password associated with the incident and introduced stronger monitoring and detection measures.

The service provider had not identified evidence that the affected information was misused as of the October 30 statement.

Cathay said the incident did not affect its own systems or operations.

The airline has informed the relevant authorities and is continuing to investigate the incident, including reviewing the information provided by Amadeus.

Affected customers will be contacted individually once Cathay establishes the relevant details.