Confirmed breach

Norwegian data breach

NONorway

Norwegian (Norway) notified the Vermont Attorney General of a data breach on 7 November 2026. It affected 144,249 passengers.

One of 9 organisations whose data was taken through Amadeus. The Amadeus breach →

What we know as of 13 November 2026

Status: Confirmed: on record with the Vermont Attorney General.
People affected: 144,249 passengers.
What was exposed: Passport numbers, Government ID numbers and Travel data.
When: First reported 7 November 2026.
How: Hacking, through Amadeus.
Norwegian’s record: No earlier breach on record under this name.

Not known yet: when it began and who was behind it. This page is updated as notices and statements come in.

Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure

People affected: 144,249passengers
Reported: 7 November 2026Official notice and 4 more

What was exposed 3

Passport numbers
Government ID numbers
Travel data

How it happened

How: Hacking The actor gained access to the information through the Spanish company Amadeus source
Our translation from Danish
Aktøren fik adgang til oplysningerne gennem den spanske virksomhed Amadeus
Through: Amadeus Norwegian affected by Amadeus data leak source · 9 organisations hit through Amadeus →
Our translation from Swedish
Norwegian drabbat av Amadeus dataläcka
Way in: Amadeus data leak at Amadeus source
Our translation from Swedish
dataläcka hos Amadeus

What changed since it was first reported

13 November 2026 Reported breach, 144,249 passengers (DR)
13 November 2026 Confirmed breach, 144,249 passengers (Vermont Attorney General)

Sources 5

Official notices are read by code from the regulator’s own register. News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. More notices to Vermont. · Corrections and changes

If Norwegian had your data

Look for Norwegian’s own notice or letter: it should say what of yours was involved. Keep it.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Expect scams that use your details: calls, texts or emails pretending to be Norwegian, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use Norwegian? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the Norwegian breach

Was Norwegian hacked?

Norwegian (Norway) notified the Vermont Attorney General of a data breach on 7 November 2026. It affected 144,249 passengers. How it happened, by the sources: hacking, through Amadeus.

What data was exposed in the Norwegian breach?

Passport numbers, Government ID numbers and Travel data, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Norwegian data breach settlement?

No settlement open for claims is on record for Norwegian as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the Norwegian breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Norwegian’s own site, or check the letter here.

More breaches in Norway

Every breach in Norway →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.