Key Notes
- About 46,000 Singapore Airlines booking records were accessed through Amadeus, while the airline says its own IT systems were not breached.
- Around 620 records may also include contact information, travel-document details and KrisFlyer membership numbers.
- Singapore Airlines is contacting affected customers with upcoming travel to change their booking references as a precaution.
Singapore Airlines says about 46,000 booking records were accessed in a data breach involving travel technology supplier Amadeus, adding another major carrier to the widening incident. The airline says its own IT systems were not breached.
For around 620 records, the exposure may extend beyond flight details to contact information, travel-document details and KrisFlyer membership numbers. Singapore Airlines is contacting affected customers with upcoming journeys to change their booking references as a precaution.
What Information Was Accessed?
In its November 3 statement to CNA, Singapore Airlines described two groups of affected records:
- About 46,000 booking records: customer names, booking reference numbers, travel itineraries and booking classes were accessed.
- About 620 of those records: email addresses, telephone numbers, travel-document details and KrisFlyer membership numbers may also have been accessed.
The figures count booking records. They should not be read as a confirmed count of individual passengers, and the airline has not said that every exposed record contained the same information.
Booking References Are Being Changed
Singapore Airlines said the unauthorized access involved customer data held on the Amadeus platform, which supports some of its reservation and booking processes. It has informed the relevant authorities and apologized to affected customers.
According to the airline, Amadeus confirmed that bank account and credit card information was not exposed and that no bookings were altered through the unauthorized access. The decision to replace affected customers’ booking references is precautionary.
A Supplier Incident Spanning Multiple Airlines
Amadeus has identified a vulnerability in a travel booking display environment. In its public statement, the company said it had implemented measures to fix the issue and strengthened monitoring and detection, while continuing its investigation and working with customers and authorities.
The supplier said it had found no evidence that payment or financial data was accessed. That assessment concerns the information investigated so far; its statement makes clear that the review is continuing.
The disclosure follows warnings from Malaysia Airlines that customer data may have been affected and an investigation by Qantas into booking-data exposure. Each carrier is assessing its own records, so the information involved and the response can differ between airlines.
What Travelers Can Do
Customers who receive a message about their booking should verify it through the airline’s official website or app. Singapore Airlines’ existing security advisory warns about impersonation by email, text and telephone, including fake customer-service numbers, and advises against giving personal or financial details to unverified contacts.
The airline also encourages travelers to enable two-factor authentication for bookings made through its website or SingaporeAir app. That adds a one-time password check before passenger details can be accessed or flights changed or canceled. It is a general security measure available to customers, separate from the booking-reference changes announced in response to this incident.
Disclaimer: TravelCapybara is an independent media brand owned and operated by NuvexMedia LLC, publishing travel news, destination guides, research, and insights. NuvexMedia LLC may invest in or collaborate with companies across the travel, hospitality, technology, and digital media sectors. These relationships do not influence TravelCapybara’s editorial coverage. While we strive for accuracy, travel requirements, prices, schedules, availability, and local conditions may change without notice. Readers should independently verify information before making travel or purchasing decisions. This content is for informational purposes only and does not constitute professional advice. © 2026 NuvexMedia LLC. All rights reserved.
