Cathay Pacific says Amadeus told it on Oct 28 (with more detail on Oct 29) that someone used login credentials assigned to an Amadeus system account to access travel reservation data. According to Amadeus's data, about 53,000 Cathay bookings were affected, with access between August 2023 and September 2026.

• Most records: booking reference, passenger name, flight details.
• A smaller subset: email and phone, travel documents and/or frequent-flyer numbers may have been accessed.
• No evidence that payment data was accessed. Cathay's own systems were not affected.
• Amadeus reset the password and added monitoring, and says it has seen no misuse so far. Cathay will notify affected customers individually.

This follows the Amadeus-related notices from Korean Air and Asiana and JAL. Note that 53,000 is a count of bookings, not of distinct people.