Incident · one vendor, 2 organisations

The Amadeus breach

23 October 2026 to 28 October 2026

2 organisations on the tracker had data taken through Amadeus, which reported its own breach on 23 October 2026. Each one is listed with the words of the source that names Amadeus.

The vendor

1. A AmadeusreportedJPJapan · 23 October 2026 Passport numbersEmail addressesPhone numbers+8 92Kcustomers

Organisations affected through Amadeus

1. JA Japan AirlinesreportedJPJapan · 28 October 2026 Passport numbersNamesReservation numbers+3 92Kpeople

   予約システムを委託していたスペインの「Amadeus」社が不正アクセスを受け FNNプライムオンライン

Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names Amadeus as the way its data was taken.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.