Someone used an Amadeus login to view airline reservation records from Aug 2023 to Sep 2026.

Confirmed so far:

• Japan Airlines: about 92k customers
• Cathay Pacific: about 53k bookings
• ANA: about 37.8k
• Also Jin Air, Star Flyer, Korean Air, and Asiana
• Bloomberg reports Condor as well

Most people had their name, booking code, and flight details exposed. A smaller group also lost email, phone, passport number, and frequent flyer number. The airlines say no cards or passwords were taken.

What to do:

• Expect fake "your flight changed" emails that quote your real route
• Open the airline app yourself instead of tapping links
• Check that upcoming bookings were not changed
• Add a PIN to frequent flyer accounts and check the points

Disclosure: I work on OSINT Pro, which does breach lookups. If you want to see where else your email shows up, https://osintpro.dev/lookup/email