Malaysia Airlines says a cybersecurity incident at its reservation technology provider, Amadeus, may have affected some customer information processed between August 2023 and September 2026.
Airline systems were not compromised
In its 31 October 2026 statement, the airline said its own IT systems had not been compromised. It also said there was currently no evidence that financial information had been accessed.
The affected period does not mean every traveller who booked during those dates has been confirmed as affected. Malaysia Airlines is working with Amadeus and relevant parties to investigate and assess the impact.
Be alert to suspicious messages
Customers are advised to watch for unsolicited communications, particularly requests for personal or financial details. Verify unexpected requests through official channels before responding.
The airline says it will provide further updates as more information becomes available.
Source: Malaysia Airlines.
