Thai Airways Reports Data Breach Affecting More Than 60,000 Passenger Records
Thai Airways Reports Data Breach Affecting More Than 60,000 Passenger Records
BANGKOK, November 11, 2026 — Thai Airways International has reported unauthorised access to its booking information, potentially affecting 60,529 passenger records after its reservation-system provider, Amadeus, detected a security breach.
In a statement issued on November 9, 2026, the airline said the affected booking data was held in Amadeus systems between August 10, 2023, and September 23, 2026. The incident was reported publicly on November 10.
The compromised information included passengers’ names, booking reference numbers, travel dates, flight routes and cabin classes.
Thai Airways said a further 376 records may have been exposed to a greater extent, potentially including email addresses, telephone numbers, passport numbers, nationalities, frequent-flyer membership numbers, flight and ticket numbers, seat assignments and other related details.
The airline stressed that credit-card information remains secure and that the breach occurred within Amadeus systems, not its own IT infrastructure. It added that the incident had not disrupted flight operations or passenger services.
Passengers Warned About Potential Phishing Attempts
Although Thai Airways has not identified any immediate action required from affected passengers, the exposed booking details could make targeted phishing attempts more convincing.
Scammers could use information such as passengers’ names, booking references, travel dates and flight routes to make fraudulent emails or phone calls appear legitimate.
Passengers are advised to remain cautious of unsolicited requests to verify passport information, pay additional fees, modify bookings or provide banking details. The airline recommends checking reservations only through its official website, mobile application or recognised customer-service channels.
Thai Airways said it would contact affected individuals after completing checks with Amadeus and confirming which records were involved.
Amadeus Resets Affected Accounts
According to Thai Airways, Amadeus has cancelled user accounts linked to the unauthorised access, reset passwords for all affected accounts and strengthened system monitoring to help prevent similar incidents.
The airline said it had reported the breach to relevant authorities and was continuing its investigation in coordination with Amadeus.
Thai Airways apologised for the concern and inconvenience caused, reaffirming that flight operations and passenger services remain unaffected.
