Amadeus IT Group
Madrid, Spain3 sources
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 1 Nov 2026.
Amadeus travel-tech supply-chain breach affects multiple airlines
Amadeus IT Group disclosed unauthorized access to one of its systems affecting multiple downstream airlines including Qantas, Cathay Pacific, Malaysia Airlines, ANA, Korean Air, Asiana, and Japan Airlines. The breach window is reported as August 2023 to September 2026.
- Type
- Supply chain
- Sector
- Technology
- First reported
- 1 Nov 2026
- Latest source
- 2 Nov 2026
What to do
- Update the affected app or extension to the version the vendor names as clean.
- If you installed a compromised version, change passwords you used on that machine.
- Search your lockfiles and build logs for the affected package versions.
- If a malicious version was installed, rotate every secret that machine or pipeline could read.
- Pin dependencies and review install scripts in CI.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for Amadeus IT Group