Travel tech firm Amadeus was hacked. Booking data from August 2023 to September this year was exposed.
Qantas, Cathay Pacific, Japan Airlines, ANA, Korean Air, Asiana and Condor are among the airlines affected.
Over 184,000 records are affected so far. The true total may be much higher as airlines finish their checks.
About 92,000 JAL customers were hit. For 2,000 of them, passport numbers were exposed too.
About 53,000 Cathay bookings were hit. Names, flight details and booking references were taken.
About 37,800 ANA customers were affected. For 1,700 of them, passport numbers may be exposed.
Qantas alerted Australia's cyber security offices. Its own systems stayed secure, the airline said.
Amadeus found a weak spot in a booking display tool. Someone used a stolen system password to look at records.
No payment data was taken, Amadeus and the airlines say. No misuse of the data has been confirmed so far.
Real booking details can power scam emails. Do not click links in strange messages about your trip.
The airlines' own systems were fine. The weak link was one supplier they all share.
Get the full story: what happened, why it matters, and what to do if you flew these airlines.
Get the full breakdown, key numbers, and what happens next.
Read on Rive News