Thai Airways clarified that more than 60,000 passenger records booked through the Amadeus system between 10 Aug 2023 and 23 Sep 2026 were hacked, exposing passport numbers and phone contacts, while emphasizing that credit card information remains safe.
On 10 Nov 2026, a reporter from Thai Airways Public Company Limited reported that the airline encountered unauthorized access to over 60,000 passenger records after Amadeus, the reservation and passenger service provider, detected data access in its system between 10 Aug 2023 and 23 Sep 2026. On 9 Nov 2026, Thai Airways issued a statement confirming that approximately 60,529 records were affected, including passenger names, booking reference codes (PNR), travel dates, flight routes, and class of service.
Additionally, about 376 records may have been further affected, containing information such as email addresses, phone numbers, passport numbers, nationality, frequent flyer membership numbers, flight numbers, ticket numbers, seat numbers, and other related details.
However, Thai Airways confirmed that passengers’ credit card details remain secure. The breach occurred within Amadeus’s system, not Thai Airways’, and did not impact flight operations or service delivery.
Amadeus has canceled user accounts involved in the unauthorized access, reset all affected passwords, and strengthened monitoring measures to prevent recurrence. Meanwhile, Thai Airways has reported the incident to relevant authorities and is collaborating with Amadeus to investigate details before notifying affected passengers individually once data is confirmed. The airline apologized for any concern and inconvenience caused.