Japan Airlines (JAL) disclosed that a breach of Amadeus’s Passenger Service System exposed data for about 92,000 customers. Amadeus notified JAL on October 23, 2026 that unauthorized access occurred between August 10, 2023 and September 23, 2026. The intrusion revealed reservation codes, names, flight dates, routes and travel classes for roughly 90,000 passengers, and for an additional 2,000 passengers also exposed email addresses, phone numbers, passport numbers, nationalities, frequent-flyer numbers and detailed ticket information. JAL said credit-card numbers and passwords were not compromised and reported no evidence of misuse. Amadeus said it has now implemented the necessary security measures and flight operations remain unaffected. The same vulnerability also affected All Nippon Airways, Asiana Airlines and Korean Air, and Amadeus has not yet clarified the full scope of impact. 1