Reported breach

Thai Airways data breach

THThailand · Travel and hospitality

Báo Mới reported a data breach at Thai Airways (Thailand) on 10 November 2026.

One of 9 organisations whose data was taken through Amadeus. The Amadeus breach →

People affected: Not reportedno count given yet
Reported: 10 November 2026News report

What was exposed 8

Passport numbers
Email addresses
Phone numbers
Passenger names
Booking codes
Flight dates
Itineraries
Seat classes

How it happened

How: Hacking the incident occurred when administrator accounts on the systems of Amadeus technology corporation were accessed without authorization source
Our translation from Vietnamese
sự cố xảy ra khi các tài khoản quản trị trên hệ thống của Tập đoàn công nghệ Amadeus bị truy cập trái phép
Through: Amadeus security incident on the Amadeus booking and ticketing platform source · 9 organisations hit through Amadeus →
Our translation from Vietnamese
sự cố bảo mật trên nền tảng đặt chỗ và xuất vé Amadeus
Way in: Amadeus security incident on the Amadeus booking and ticketing platform source
Our translation from Vietnamese
sự cố bảo mật trên nền tảng đặt chỗ và xuất vé Amadeus

Sources 1

News reportBáo MớiMore than 60,000 bookings of Thai Airways were leaked (our translation from Vietnamese)10 November 2026

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

If Thai Airways had your data

Look for Thai Airways’s own notice or letter: it should say what of yours was involved. Keep it.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Your email address is out: expect convincing phishing. Open Thai Airways by typing its address yourself, never through a link in an email or text, and check the sender before you reply.
Your phone number is out: ask your mobile operator for a PIN or port-out lock, so nobody can move your number to another SIM card and take your login codes.
Expect scams that use your details: calls, texts or emails pretending to be Thai Airways, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use Thai Airways? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the Thai Airways breach

Was Thai Airways hacked?

Báo Mới reported a data breach at Thai Airways (Thailand) on 10 November 2026. How it happened, by the sources: hacking, through Amadeus. It has been reported but not confirmed by Thai Airways or an authority.

What data was exposed in the Thai Airways breach?

Passport numbers, Email addresses, Phone numbers, Passenger names, Booking codes, Flight dates, Itineraries and Seat classes, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Thai Airways data breach settlement?

No settlement open for claims is on record for Thai Airways as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the Thai Airways breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Thai Airways’s own site, or check the letter here.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.