Privacy Unpacked

Incident · one vendor, 2 organisations

The Amadeus IT Group breach

23 October 2026 to 30 October 2026

2 organisations on the tracker had data taken through Amadeus IT Group. Each one is listed with the words of the source that names Amadeus IT Group.

Organisations affected through Amadeus IT Group

  1. AmadeusreportedHKHong Kong SAR China · 23 October 2026 Passport numbersEmail addressesPhone numbers+9 92Kcustomers
    Amadeus IT Group, the company that runs its flight reservation, ticketing and check-in systems, informed the firm last week that hackers accessed a "portion of customer reservation data" The Record
  2. All Nippon AirwaysreportedJPJapan · 30 October 2026 Passport numbersPhone numbersNames+5 37.8Kcustomers
    one of its contractors, Spain-based Amadeus IT Group S.A., had suffered unauthorized access The Mainichi

Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names Amadeus IT Group as the way its data was taken.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.