JAL and Japan Transocean Air say Amadeus, which runs their reservation, ticketing and check-in system, told them on Oct 23 that it found traces of outside access to part of their reservation data between Aug 10, 2023 and Sep 23, 2026. This follows the Korean Air and Asiana disclosures last week about the same provider.

• About 90,000 customers: booking reference (PNR), name, flight date, route and class.
• About 2,000 more: also email, phone, passport number, nationality, frequent flyer number, ticket and seat number.
• JAL says no card numbers or passwords were exposed, Amadeus has finished its security measures, there is no sign of misuse so far, and flights are unaffected. It is contacting customers and opened an inquiry line on Oct 29.

What to do: a PNR plus surname can open a booking online, so affected travelers should watch for itinerary changes and for phishing or calls that quote real flight details. Other Amadeus airline customers may follow with notices of their own.