# Massive Data Breach Hits Amadeus Airline Booking Systems Hackers accessed sensitive travel records of government employees and international airline passengers. - **Source:** [Rzeczpospolita](https://www.rp.pl) - **Published:** 2026-11-06 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/6548d0ef-fafb-4175-903e-b8ae00f8e993 ## Extensive Data Exposure Identified Norwegian intelligence services confirmed a major data breach affecting the Amadeus booking system. Hackers potentially accessed sensitive travel information spanning the last three years. This incident impacts employees from over 190 Norwegian state institutions, alongside numerous private companies, raising significant concerns regarding the security of international travel and government communications. ## Global Airline Industry Impact The breach extends far beyond Norway, affecting major international carriers globally. Singapore Airlines reported that 46,000 bookings were potentially compromised. Meanwhile, Japan Airlines disclosed that 92,000 customers were affected, with 2,000 individuals facing the additional risk of passport number exposure. These figures highlight the widespread vulnerability of centralized airline reservation systems. ## Norwegian Security Alert Level In response to the escalating cyber threat landscape, the Norwegian National Security Authority (NSM) raised the national cyberattack threat level to the second-highest tier last week. This decision followed a series of targeted incidents, including a separate, confirmed intrusion into the Norwegian Ministry of Foreign Affairs' internal information systems. ## Mitigation and Response Efforts Arne Christian Haugstoeyl, director of the NSM, emphasized the urgency of the situation during a public statement. Authorities are actively notifying affected institutions and private enterprises to facilitate immediate risk mitigation measures. The goal is to limit further exposure and secure systems against potential follow-up attacks by the unidentified threat actors. ## Broader Context of Breaches The incident coincides with other recent security failures in the travel sector, such as the unauthorized access to business email accounts at the travel agency Wakacje.pl. These recurring events underscore the persistent targeting of the tourism industry by cybercriminals, who exploit the high volume of sensitive personal data processed by these platforms. ## Nature of Stolen Information While the full scope remains under investigation, the compromised data includes travel itineraries and personal identifiers. For government employees, this level of exposure poses specific risks regarding operational security and personnel safety. The three-year window of access suggests a sophisticated, long-term infiltration strategy rather than a single, isolated technical failure. ## Systemic Vulnerabilities in Travel The reliance on centralized platforms like Amadeus creates a single point of failure for the global aviation industry. When these systems are breached, the impact cascades across multiple airlines and national borders simultaneously. This architecture necessitates robust, multi-layered security protocols to protect the vast repositories of traveler data stored digitally. ## Future Security Implications Moving forward, stakeholders must prioritize enhanced encryption and stricter access controls for travel booking infrastructure. The Norwegian government's proactive disclosure serves as a critical warning for other nations to audit their own dependencies on third-party reservation systems. Continuous monitoring and rapid incident response remain essential to countering these evolving digital threats. ## Sources covering this story - https://sukces.rp.pl/linie-lotnicze/art45458321-hakerzy-w-amadeusie-rozlegly-wyciek-danych-klientow-linii-lotniczych — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._