Reported breach

SAS AB data breach

SESweden

SVT, Tilannemedia and UA.NEWS reported a data breach at SAS AB (Sweden) on 9 November 2026. It affected 350,164 people.

One of 9 organisations whose data was taken through Amadeus. The Amadeus breach →

What we know as of 10 November 2026

Status: Reported by SVT, Tilannemedia and UA.NEWS; not yet confirmed by SAS AB or an authority.
People affected: 350,164 people.
What was exposed: Booking references, Dates, Flight-related information, Number of passengers, Passenger data, Booking numbers, Passenger count and Flight information.
When: First reported 9 November 2026.
How: Hacking, through Amadeus.
SAS AB’s record: No earlier breach on record under this name.

Not known yet: when it began and who was behind it. This page is updated as notices and statements come in.

Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure

People affected: 350,164people
Reported: 9 November 2026News report and 6 more

Who is affected: Sweden, Finland, Norway

What was exposed 9

Booking references
Dates
Flight-related information
Number of passengers
Passenger data
Booking numbers
Passenger count
Flight information
Reservation numbers

How it happened

How: Hacking An external actor is said to have used "compromised system credentials" to gain access to the IT supplier Amadeus booking system. After that, the actor is said to have made automated searches source
Our translation from Swedish
En extern aktör ska ha använt "komprometterade systemuppgifter" för att ta sig in i it-leverantören Amadeus bokningssystem. Därefter ska aktören ha gjort automatiserade sökningar
Through: Amadeus suspected data leak in the global Amadeus booking system source · 9 organisations hit through Amadeus →
Way in: Amadeus An external actor is said to have used "compromised system credentials" to gain access to the IT supplier Amadeus booking system source
Our translation from Swedish
En extern aktör ska ha använt "komprometterade systemuppgifter" för att ta sig in i it-leverantören Amadeus bokningssystem

What changed since it was first reported

10 November 2026 Reported breach, 350,164 people (Editor: country set to SE (SAS notified Sweden's data protection authority, Integritetsskyddsmyndigheten (IMY) (SVT, 9 Nov 2026)))

Sources 7

Show all 7 sources

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

Questions about the SAS AB breach

Was SAS AB hacked?

SVT, Tilannemedia and UA.NEWS reported a data breach at SAS AB (Sweden) on 9 November 2026. It affected 350,164 people. How it happened, by the sources: hacking, through Amadeus. It has been reported but not confirmed by SAS AB or an authority.

What data was exposed in the SAS AB breach?

Booking references, Dates, Flight-related information, Number of passengers, Passenger data, Booking numbers, Passenger count, Flight information and Reservation numbers, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a SAS AB data breach settlement?

No settlement open for claims is on record for SAS AB as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the SAS AB breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to SAS AB’s own site, or check the letter here.

More breaches in Sweden

Every breach in Sweden →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.