More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus
A breach at Spanish travel-tech firm Amadeus rippled across six Asian airlines, spotlighting the supply-chain concentration risk that DORA and NIS2 aim to curb through mandatory third-party oversight.
Summary written by editorial AI · Source link below
Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data breaches traced back to Amadeus IT Group — a company that builds and maintains platforms for flight reservation, ticketing and check-in platforms.
Editorial Analysis
Framed for the CISO & Security Leaders desk
A single point of compromise at travel-technology provider Amadeus cascaded into breaches at six major airlines, exemplifying concentrated third-party risk that regulators increasingly scrutinise under DORA and NIS2.
Map your critical IT service providers that aggregate data from multiple business units or partners, and verify contractual breach-notification timelines align with DORA/NIS2 requirements.
A single breach at travel-tech provider Amadeus caused data breaches at six airlines—highlighting the concentrated third-party risk that EU regulations now require boards to govern.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at The Record in a new tab.
More from the Threat Intel Desk
- Hackers pull off $133 million French bank heist via service provider2d
- Fake security tools on GitHub push backdoors and infostealers3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)3d
- CEO-spoofing scammers used AI to help steal more than $100 million, feds say3d
- Chainalysis says breach exposed credentials for all customers3d