---
title: Cathay Pacific: the Amadeus reservation-system breach touched about 53,000 Cathay bookings from Aug 2023 to Sept 2026; most exposed only names, booking references and flights | ctxsec
url: https://ctxsec.com/items/cathay-pacific-amadeus-breach-53000-bookings
description: ""
status: "official (Cathay Pacific notice, Oct 30)"
published: 2026-10-30
---

> 

[← Cybersecurity News](/news) · [markdown](/items/cathay-pacific-amadeus-breach-53000-bookings.md)

official (Cathay Pacific notice, Oct 30)

2026-10-30

### Cathay Pacific: the Amadeus reservation-system breach touched about 53,000 Cathay bookings from Aug 2023 to Sept 2026; most exposed only names, booking references and flights

Cathay Pacific says Amadeus told it on **Oct 28** (with more detail on Oct 29) that someone used login credentials assigned to an Amadeus system account to access travel reservation data. According to Amadeus's data, about **53,000 Cathay bookings** were affected, with access between **August 2023 and September 2026**.

- Most records: booking reference, passenger name, flight details.
- A smaller subset: email and phone, travel documents and/or frequent-flyer numbers may have been accessed.
- No evidence that payment data was accessed. Cathay's own systems were not affected.
- Amadeus reset the password and added monitoring, and says it has seen no misuse so far. Cathay will notify affected customers individually.

This follows the Amadeus-related notices from [Korean Air and Asiana](/news#amadeus-account-breach-korean-air-asiana-reservations) and [JAL](/news#jal-amadeus-pss-unauthorized-access-92k-customers). Note that 53,000 is a count of bookings, not of distinct people.

Sources: [Cathay Pacific: Personal data security incident involving a third-party service provider (Oct 30)](https://www.cathaypacific.com/cx/en_HK/latest-news/security-and-operational-changes/personal-data-security.html)