Amadeus Data Breach: Cathay Pacific Joins Growing List of Airlines Affected

Hong Kong's Cathay Pacific Airways has said it is among a growing list of global airlines affected by a data breach at a major software provider, Amadeus IT Group. In a statement on Friday (October 30), the airline said around 53,000 bookings were affected by unauthorised access to reservation data held by Amadeus between August 2023 and September 2026, according to a Bloomberg report carried by The Star.

What data was involved

Cathay said most of the affected records contained booking references, passenger names and flight details. A smaller subset potentially included email addresses, phone contacts and travel document information. The airline said the incident is under investigation and is not affecting its own systems or operations.

Other airlines hit

The report said the breach has touched a number of major carriers. Japan Airlines has said about 92,000 customer records were exposed in a cyberattack, while ANA Holdings said information of up to 37,800 passengers was leaked. Korean Air Lines and Germany's Condor have also said their data was affected. It remains unclear whether more airlines will come forward, since Amadeus software is widely used across the global aviation industry. Deutsche Lufthansa, which entered a partnership with Amadeus this year, had not immediately responded to a request for comment at the time of the report.

Why this breach matters

Airlines rely on a small number of technology vendors to handle bookings, check-in and passenger records. When one provider is compromised, the impact can spread to many airlines at once, even if each airline's own network remains secure. The long period covered by the unauthorised access, nearly three years according to Cathay's statement, also highlights how difficult it can be to detect this kind of intrusion.

Advice for travellers

Passengers who have flown with affected airlines should watch for phishing messages that use real booking details to appear convincing. Avoid clicking links in unexpected messages, and verify any request for information through the airline's official channels. Malaysian readers can also read about the statement issued by Malaysia Airlines in our related post.

Source: The Star (Bloomberg) - Cathay Pacific joins growing list of airlines hit by data breach

Malaysia Airlines Says Its Systems Were Not Compromised in Vendor Data Breach

Malaysia Airlines has said that its own systems were not compromised despite a cybersecurity breach at a vendor, according to a report published by The Star on Sunday (November 1). Malay Mail also ran a headline the same day saying the airline warns customers of data exposure in the breach at Amadeus, the travel technology provider that supplies reservation software to many airlines around the world.

What is known

The distinction the airline is drawing is important. A breach at a third-party vendor does not necessarily mean the airline's own network was hacked, but it can still affect passenger information that is stored or processed on the vendor's platform. The reports I reviewed do not spell out exactly what types of information were involved for Malaysia Airlines customers or how many people may be affected, so readers should rely on the airline's official notice for those details.

The wider picture

The Amadeus incident has hit several carriers in Asia and Europe. Bloomberg, in a report carried by The Star on October 30, said Cathay Pacific had around 53,000 bookings affected by unauthorised access to reservation data held by Amadeus between August 2023 and September 2026. Japan Airlines said about 92,000 customer records were exposed, ANA Holdings reported that information of up to 37,800 passengers was leaked, and Korean Air Lines and Condor have also said their data was affected.

What travellers can do

General cybersecurity advice applies when an airline announces a vendor-related breach. Be cautious about unexpected emails, text messages or phone calls that mention your booking, even if they appear to come from the airline. Do not click links or share one-time passwords. Consider updating passwords for any frequent flyer accounts and monitor them for unusual activity. When in doubt, contact the airline using the contact details printed on its official website or app.

The situation may develop as the airline and the vendor complete their investigations.

Sources: The Star - Our system not compromised despite vendor's cybersecurity breach, says Malaysian Airlines | The Star (Bloomberg) - Cathay Pacific joins growing list of airlines hit by data breach

Immigration Department Vows Firm Action Over Special Pass Misconduct Allegations

The Immigration Department says it will not tolerate misconduct, abuse of power or breaches of integrity by its officers, regardless of rank or position. Director-general Datuk Zakaria Shaaban issued the statement on Sunday (November 1), responding to allegations of irregularities in the issuance of Special Passes by several officers in Kuala Lumpur, according to The Star.

The allegations

The statement followed a report by a news portal that alleged corrupt practices involving Special Pass applications and possible involvement of insiders within government departments. The portal claimed that seven officers, described as untouchable, were operating under pseudonyms, and it questioned whether some officers enjoyed influence or protection that made action against them difficult. It also alleged that immigration facilities might have been exploited to let foreigners, including individuals linked to Macau scam and love scam syndicates, remain in the country. These are allegations, and they have not been proven.

The department's response

Zakaria urged anyone with information or evidence to submit it directly to the authorities or the Malaysian Anti-Corruption Commission (MACC). He explained that going directly to the authorities protects the confidentiality of information and the integrity of evidence, while disclosing suspected illegal activity publicly beforehand could lead those involved to stop, change their methods or destroy evidence. He said every report received would be scrutinised and referred for action in line with the law and regulations.

Disciplinary record

To show its stance, the department released figures: 849 Immigration officers faced disciplinary action between 2023 and October this year, including 73 who were dismissed. From January to October this year alone, 96 officers faced disciplinary action, of whom 18 were dismissed. Zakaria said the department will continue strengthening integrity, compliance with procedures and internal controls so that services are delivered transparently.

Why it matters

Special Passes are an important part of the immigration system, and any suggestion of abuse raises concerns about enforcement and public trust. The public will be watching for whether the allegations lead to formal investigations by the MACC and what outcomes follow.

Source: The Star - Immigration vows firm action over Special Pass misconduct allegations

Sabah Says It Will Closely Monitor High Altitude Training Centre on Mount Kinabalu

The Sabah government says it will closely monitor the approved High Altitude Training Centre (HATC) on Mount Kinabalu to make sure it complies with environmental and safety requirements. Tourism, Culture and Environment Minister Datuk Jafry Ariffin made the statement on Sunday (November 1) in response to environmental concerns raised on social media, as reported by The Star.

Building approach

Jafry said the project will use lightweight, prefabricated and modular building materials in order to reduce disturbance to the surrounding environment, and that heavy machinery will be avoided. He added that the structures are designed to withstand strong winds and the challenging weather found at high elevations.

Approvals and enforcement

According to the minister, the development has received approval from the Sabah Parks Board of Trustees and the endorsement of the Mount Kinabalu Native Customary Advisory Council, a nod to the mountain's cultural and spiritual importance to indigenous communities. He stressed that having approval does not exempt any party from following the conditions attached to the project. Investigations will be carried out where necessary, and action will be taken against anyone found to have violated the conditions or relevant laws.

Purpose and background

The HATC is intended to improve mountaineering facilities by providing basic accommodation for specialised high-altitude training and mountaineering activities, while protecting the mountain's environment and cultural significance. The project was first proposed under the Kinabalu Park Development Plan in 2015, but it was deferred after the earthquake that struck Mount Kinabalu that year. It was revived and launched in 2025 as part of efforts to diversify Sabah's tourism offerings and strengthen its position as an international mountaineering destination.

Public discussion

Jafry urged the public to base discussions on accurate information and a clear understanding of the project's purpose and scope. Mount Kinabalu is a UNESCO World Heritage site and one of Malaysia's best-known natural landmarks, so any development there is likely to draw close attention from conservationists, climbers and local communities alike. Readers interested in the project can follow updates from Sabah Parks and the state tourism ministry.

Source: The Star - Sabah pledges close monitoring of sensitive Mt Kinabalu development

Malaysians Can Now Apply Online for 10-Year Passports From November 2

Malaysians can apply online for passports with a 10-year validity period starting today, Monday (November 2). The Immigration Department announced on Sunday that the online passport application service has been expanded, so the public can now choose either a five-year or a 10-year Malaysian International Passport when applying online. Until now, online applications were available only for the five-year version.

Why the department made the change

Immigration director-general Datuk Zakaria Shaaban said the 10-year option would be rolled out gradually once all passport-issuing offices in Malaysia and overseas had completed the implementation and the system was confirmed to be stable. He said the initiative gives Malaysians more flexibility and convenience to choose a validity period based on their needs.

Key facts on the new passport

The new passport was introduced on July 1. Malaysians aged 18 and above can choose between five and 10 years of validity. The 10-year passport costs RM350, while the five-year passport remains at RM200. Zakaria said public response to the new document has been encouraging, with the longer validity, improved security features and redesigned look receiving positive feedback.

Numbers and waiting time

Between July 1 and September 30, a total of 627,142 passports were issued, made up of 541,994 with five-year validity and 85,148 with 10-year validity. The average waiting time for a new passport is about one hour after payment, although slight delays may occur during peak periods. The department says it will keep monitoring public feedback to ensure services remain efficient.

What about older passports?

Zakaria reminded the public that the old version of the passport remains valid for travel as long as it has more than six months of validity left. Travellers planning trips abroad should still check the entry requirements of their destination countries.

Readers who plan to renew are advised to use the official Immigration Department channels and to be cautious of unofficial agents or websites.

Source: The Star - Online application for 10-year passports starts on Monday