Over 40,000 Singapore Airlines booking records affected by third-party data breach超过4万条新加坡航空公司预订记录受第三方数据泄露影响
The names of some Singapore Airlines (SIA) customers and their travel booking details were accessed without authorisation after airline technology provider Amadeus suffered a data breach.Amadeus, which supports certain SIA reservations and booking processes, shared with Singapore's flag carrier that data from about 46,000 SIA booking records was compromised.An SIA spokesperson told AsiaOne that for about 620 booking records, additional...
The names of some Singapore Airlines (SIA) customers and their travel booking details were accessed without authorisation after airline technology provider Amadeus suffered a data breach.
Amadeus, which supports certain SIA reservations and booking processes, shared with Singapore's flag carrier that data from about 46,000 SIA booking records was compromised.
An SIA spokesperson told AsiaOne that for about 620 booking records, additional information including email addresses, phone numbers, travel document details, and KrisFlyer membership numbers may have been accessed too.
The Spanish firm has confirmed to SIA that the exposed data does not include bank account or credit card information, and the unauthorised access also did not result in any modification to bookings.
"The incident was confined to Amadeus' platform, and Amadeus has informed SIA that it has implemented containment measures and additional security safeguards following the incident," the spokesperson added.
"SIA would like to assure all customers that the incident did not involve a breach of its IT systems."
As a precaution, the carrier said it is directly contacting affected customers with upcoming travel to change their booking reference numbers, adding that it has informed the relevant authorities about the matter.
"SIA sincerely apologises to affected customers for any inconvenience caused," the spokesperson said.
"The protection of our customers' personal data is of utmost importance to SIA."
Other global carriers affected by this data breach include Cathay Pacific, Japan Airlines, Korean Air and Malaysia Airlines.
According to a statement posted on Amadeus' website in October, certain booking-display data was available through a software glitch.
It said its investigations are ongoing, and there is no evidence that payment or financial data was accessed.
Amadeus added that there are no signs the vulnerability has been exploited for ransomware purposes, and that it has since implemented measures to fix the vulnerability as well as enhanced monitoring and detection capabilities.
lim.kewei@asiaone.com
新加坡航空公司（SIA）部分客户的姓名及其旅行预订详情在航空公司技术提供商 Amadeus 遭遇数据泄露后，未经授权被访问。
为新加坡航空某些预订流程提供支持的 Amadeus 公司告知新加坡航空，约 46,000 条新加坡航空预订记录的数据遭到泄露。
新加坡航空发言人告诉AsiaOne，大约620条预订记录中，可能还访问了包括电子邮件地址、电话号码、旅行证件详情和KrisFlyer会员号码在内的其他信息。
这家西班牙公司已向新加坡航空公司证实，泄露的数据不包含银行账户或信用卡信息，未经授权的访问也没有导致任何预订变更。
发言人补充说：“该事件仅限于 Amadeus 的平台，Amadeus 已告知新加坡航空公司，事件发生后，该公司已采取遏制措施和额外的安全保障措施。”
“新加坡航空公司向所有客户保证，此次事件并未涉及其IT系统遭到入侵。”
作为预防措施，该航空公司表示，他们正在直接联系受影响的、即将出行的乘客，更改他们的预订参考编号，并补充说，他们已将此事告知相关部门。
“新加坡航空对由此给受影响的乘客带来的不便深表歉意，”发言人表示。
“保护客户的个人数据对新加坡航空公司来说至关重要。”
受此次数据泄露事件影响的其他国际航空公司包括国泰航空、日本航空、大韩航空和马来西亚航空。
根据 Amadeus 10 月份在其网站上发布的一份声明，某些预订显示数据是通过软件故障泄露的。
该公司表示，调查仍在进行中，目前没有证据表明支付或财务数据遭到访问。
Amadeus补充说，目前没有迹象表明该漏洞已被用于勒索软件攻击，并且该公司已采取措施修复该漏洞，并增强了监控和检测能力。
lim.kewei@asiaone.com