Japan Airlines (JAL) Amadeus'ning Yo'lovchilarga Xizmat Ko'rsatish Tizimidagi ma'lumotlar buzilishi natijasida taxminan 92 000 mijozning ma'lumotlari fosh bo'lganini e'lon qildi.
JAL Group, JAL va Japan Transocean Air aviakompaniyalarini boshqaradi, yo'lovchilarni bron qilish, chiptalar berish va ro'yxatdan o'tkazish uchun ushbu tizimdan foydalanadi.
E'loniga ko'ra, Amadeus aviakompaniyaga 2026-yil 23-oktabrda xabar berdi, uning tizimlariga ruxsatsiz kirish 2023-yil 10-avgustdan 2026-yil 23-sentabrgacha sodir bo'lgan.
Ushbu uzoq davom etgan buzilish natijasida tahdid aktori taxminan 90 000 mijozning bron kodlari (PNR), ismlari, parvoz sanalari, yo'nalishlari va sayohat sinflariga kirish huquqiga ega bo'ldi.
Yana 2 000 mijoz yuqoridagi ma'lumot turlari, shuningdek, elektron pochta manzillari, telefon raqamlari, pasport raqamlari, millatlari, tez-tez uchuvchilar raqamlari, shuningdek, parvoz, chipta va o'rindiq raqamlari fosh bo'ldi.
JAL kredit karta raqamlari va parollar buzilmaganini aytdi va hozirda mijoz ma'lumotlarining noto'g'ri ishlatilganiga dalil yo'qligini ta'kidladi.
Kompaniya Amadeus endi zarur xavfsizlik choralarini amalga oshirganini va parvoz operatsiyalari ta'sirlanmaganini aytdi.
Kengroq ta'sir
Amadeus sayohat agentliklari, aviakompaniyalar, aeroportlar va mehmonxonalar uchun yechimlar taqdim etadigan IT firmasi.
Bu global aviatsiya uchun yirik texnologiya yetkazib beruvchi bo'lib, 400 dan ortiq aviakompaniya, 210 aeroport operatori, 34 kruiz va parom liniyasi va 2 million mehmonxona tomonidan foydalaniladi.
Amadeus 2026-yil 1-oktabrda o'z veb-saytida e'lon qildi, u sayohat bron qilishni ko'rsatish muhitida zaiflikni aniqlagan, bu sayohatchilarning ma'lumotlarini fosh qilishi mumkin.
O'sha paytda kompaniya ransomware aktorlari zaiflikdan foydalanmaganini va hech qanday to'lov yoki boshqa moliyaviy ma'lumotlar fosh bo'lmaganini ta'kidladi.
JAL hozir tasdiqlaganidek, zaiflik yomon niyat bilan ishlatilganga o'xshaydi.
Ular ushbu kampaniyaning yagona qurboni emasga o'xshaydi.
All Nippon Airways (ANA) ham bugun mahalliy ommaviy axborot vositalariga ko'ra, Amadeus bilan bog'liq mijoz ma'lumotlari buzilishini e'lon qildi.
Aviakompaniya shuningdek, 21-oktabrdan beri veb-sayti va mobil ilovasidagi ba'zi tegishli xizmatlarni to'xtatgan, garchi bu harakat Amadeus hodisasi emas, balki PHP2Shell tahdidi bilan bog'liq ko'rinadi.
Amadeus zaifligidan ta'sirlanganini tasdiqlagan boshqa aviakompaniyalar — Asiana Airlines va Korean Air, ikkisi ham yirik Janubiy Koreya tashuvchilari.
BleepingComputer Amadeusdan ta'sir doirasi haqida, xususan, ko'proq aviakompaniyalar va boshqa davlatlar/bozorlar ta'sirlanganmi yoki yo'qmi, ko'proq ma'lumot so'radi, ammo kompaniya nashr etilish vaqti bo'yicha ko'proq ma'lumot taqdim etmadi.
Hujumchilar haqiqiy hisob ma'lumotlariga ega bo'lgach, ularning harakatlarining faqat 37% bloklanadi
Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy hisob ma'lumotlaridan foydalanayotganda, oldini olish keskin pasayadi.
Blue Report 2026 mijoz ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha texnikadan texnikaga mudofaa choralarini o'lchaydi.
Hisobotni oling
Japan Airlines (JAL) has announced that a data breach at Amadeus’s Passenger Service System exposed the data of about 92,000 customers.
JAL Group, which operates the airlines JAL and Japan Transocean Air, uses the system to handle passenger reservations, ticketing, and check-in.
According to its announcement, Amadeus notified the airline on October 23, 2026, that unauthorized access to its systems occurred between August 10, 2023, and September 23, 2026.
As a result of this lengthy breach, the threat actor accessed reservation codes (PNRs), names, flight dates, routes, and travel classes for approximately 90,000 customers.
An additional 2,000 customers had the above data types exposed, plus their email addresses, phone numbers, passport numbers, nationalities, frequent flyer numbers, and flight, ticket, and seat numbers.
JAL says credit card numbers and passwords were not compromised, and assured that it currently has no evidence of customer information being misused.
The company said Amadeus has now implemented the necessary security measures and flight operations are unaffected.
Broader impact
Amadeus is an IT firm that provides solutions for travel agencies, airlines, airports, and hotels.
It is a major tech supplier to global aviation, used by over four hundred airlines, 210 airport operators, 34 cruise and ferry lines, and 2 million hotels.
Amadeus published a statement on its website on October 1, 2026, announcing it had discovered a vulnerability in its travel booking display environment that could expose travelers’ data.
At the time, the company said ransomware actors had not exploited the flaw and assured that no payment or other financial data had been exposed.
As JAL has confirmed now, the vulnerability appears to have been maliciously exploited.
It appears they were not the only victim of the campaign.
All Nippon Airways (ANA) has also announced a customer data breach earlier today tied to Amadeus, according to local media.
The airline has also suspended certain related services on its website and mobile app since October 21, although that action appears linked to the PHP2Shell threat rather than the Amadeus incident.
Other airlines that have confirmed impact from the Amadeus flaw are Asiana Airlines and Korean Air, both major South Korean carriers.
BleepingComputer has asked Amadeus for more information about the scope of the impact, specifically whether more airlines and other countries/markets were affected, but the company has not provided more information as of publication.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report