Japan Airlines: 92,000 customers’ booking data viewed through Amadeus

If you booked a Japan Airlines (JAL) or Japan Transocean Air flight in the last three years, watch out for messages that quote your real booking. JAL says attackers got into the reservation system run by its technology supplier Amadeus and viewed booking details for about 92,000 customers, including passport numbers for about 2,000 of them.^{1, 2}

Reporting checked October 28, 2026.

Too long; didn’t read?

• About 90,000 customers: booking code, name, flight date, route and class of travel were viewed.¹
• About 2,000 more: also email, phone number, passport number, nationality, frequent flyer number, ticket and seat number.¹
• No credit card numbers or passwords were exposed, and JAL has seen no misuse so far.¹
• Korean Air, Asiana and ANA have also been notified by Amadeus, according to news reports.^{4, 5}

What happened

Amadeus IT Group is the technology company whose system handles reservations, ticketing and check-in for many airlines. On October 23, 2026, it told JAL and its subsidiary Japan Transocean Air that it had found traces of outside access to part of their customer reservation data, caused by unauthorized access to its system. The airlines announced it on October 28.¹

The traces cover reservation records from August 10, 2023 to September 23, 2026. Not every booking from that period is affected: JAL says it is “a portion” of the records, and it will contact affected customers individually.¹ The airlines say Amadeus has completed the necessary security measures, there is no evidence that the information has been misused, and flights are not affected.¹

Other airlines

JAL is not the only Amadeus customer involved. Korean Air and Asiana Airlines said on October 23 that personal information had leaked from Amadeus’s systems, according to The Asia Business Daily. The paper reports that the attacker used login details belonging to an account in Amadeus’s system, over roughly the same period, from August 2023 to September 2026.⁵

The Asahi Shimbun reports that All Nippon Airways (ANA), which uses the same system, has also received a notice from Amadeus and is still checking the impact.⁴ The Record notes that the JAL breach follows a string of cyberattacks on Japanese companies in recent weeks.³

What the information could be used for

On many airline websites, a booking code and surname are what you type in to look up a booking. Combined with an email address and phone number, they make a fake “your flight has changed” or “refund available” message very convincing. Passport numbers are not enough to travel on, but scammers can use them to make a fake request look official. The Asahi Shimbun reports that passport photos were not viewed.⁴

JAL says it will remind affected customers to be careful of phishing emails, fraudulent phone calls and fake websites pretending to be the JAL Group.¹

What you can do

• Treat messages about your booking with suspicion, even if they quote your real booking code, flight or seat. Open the JAL app or type the airline’s web address yourself instead of clicking a link.
• Never pay a “rebooking fee” or claim a “refund” through a link in an email, text or chat message.
• Protect your frequent flyer account. Use a unique password and turn on any extra login protection the airline offers, since miles are a common target.
• Call the dedicated inquiry desk if unsure. From October 29, JAL’s line is 0120-25-6050 or 03-4332-7280 in Japan, or +81-3-4332-7280 from abroad, 10:00 to 17:00 Japan time on weekdays.¹
• If you flew Korean Air, Asiana or ANA, watch for notices from those airlines too.

Sources

1. Japan Airlines and Japan Transocean Air, October 28, 2026: Regarding unauthorized access to Amadeus Passenger Service System
2. ITmedia News, October 28, 2026: Unauthorized access to JAL’s reservation system; about 90,000 customers’ booking data leaked (in Japanese)
3. The Record, October 28, 2026: Japan Airlines warns of data breach as country grapples with multiple cyber incidents
4. The Asahi Shimbun, October 28, 2026: Unauthorized access at JAL and ANA contractor; traces of personal data being viewed (in Japanese)
5. The Asia Business Daily, October 23, 2026: Korean Air, Asiana customer information leaked through IT service provider