MALAYSIA Airlines has alerted customers to a possible exposure of their personal information following a cybersecurity incident involving Amadeus, the third-party technology provider operating its airline reservation system.
In a statement on Saturday, the national carrier said the incident may have affected certain customer information processed through Amadeus between August 2023 and September 2026.
The airline stressed that its own information technology systems had not been compromised and there was currently no evidence that customers' financial information had been accessed.
"We are treating this matter with the utmost seriousness and are working closely with Amadeus and relevant parties to investigate the incident and assess its impact," it said.
However, the airline did not disclose the number of customers potentially affected, the specific types of personal information involved or when and how the breach was discovered.
As a precaution, customers were advised to remain vigilant against suspicious or unsolicited communications, particularly messages requesting personal or financial information.
Such communications could be phishing attempts exploiting exposed customer information to make fraudulent messages appear more credible.
"The privacy and protection of our customers' information remain our foremost priority," the airline said, adding that it was committed to ensuring the matter received the highest level of attention and appropriate safeguards.
It said further updates would be provided as more information became available.
Amadeus is among the world's largest providers of airline reservation and distribution technology, serving airlines and travel agencies.
Last month, a cybersecurity incident involving unauthorised access to its passenger reservation systems was disclosed, with several airlines, primarily in Asia, reporting potential exposure of customer information.
They include Japan Airlines, All Nippon Airways, Korean Air, Asiana Airlines, Cathay Pacific, Malaysia Airlines and Star Flyer. - November 1, 2026
