Data linked to about 46,000 Singapore Airlines (SIA) booking records was accessed without authorisation in a breach involving Amadeus, a technology provider that supports some of the airline’s reservations and bookings.
Customers’ names, booking reference numbers, itineraries and booking classes were among the information accessed, SIA said in a 3 November statement reported by CNA.
The airline said its own IT systems were not breached. The incident was confined to Amadeus’ platform.
More Personal Details May Have Been Accessed in About 620 Records
For about 620 booking records, the information potentially accessed went further, including email addresses, phone numbers, travel-document details and KrisFlyer membership numbers.
SIA said Amadeus had confirmed that bank account and credit card information was not exposed, and that the unauthorised access had not resulted in changes to bookings.
SIA Is Changing Booking References for Affected Upcoming Trips
As a precaution, SIA is directly contacting affected customers who have upcoming travel to change their booking reference numbers.
The airline said it had notified the relevant authorities and apologised to affected customers for the inconvenience.
Amadeus had also told SIA that it had taken steps to contain the incident and added security safeguards.
In its own statement dated October 2026, Amadeus said it had identified a security weakness in a system used to display travel bookings. That weakness had made some booking information accessible.
The company said it had taken measures to fix the weakness and strengthened its ability to monitor for and detect problems. Its statement said investigations were continuing.
Other Airlines Have Also Been Affected
Cathay Pacific disclosed on 30 October that about 53,000 of its bookings had been affected by unauthorised access to reservation data held by Amadeus.
Cathay said most of those records contained booking references, passenger names and flight details. A smaller group potentially included additional personal information. It said its own systems and operations were unaffected.
