Japan Airlines Data Breach via Amadeus: What Leaked and What to Do

Japan Airlines disclosed in October 2026 that booking data for about 92,000 customers was exposed through a breach at its reservation vendor Amadeus. Here is what leaked and what to watch for.

1. What happened

On October 28, 2026 JAL and Japan Transocean Air announced unauthorized access at Amadeus, their reservation system vendor. Asiana disclosed the same incident.

2. Who's affected

About 92,000 customers with bookings from August 2023 to September 2026.

3. What leaked

For most: names, booking codes, flight dates, routes and travel class. For about 2,000: passport numbers, frequent flyer numbers, emails, phone numbers, nationality and seat and ticket numbers.

4. What didn't

JAL says no credit card numbers were taken and flight operations were not affected.

5. What to do

Expect phishing that knows your real trip. Don't click links in emails or texts about your booking; open the JAL app or site yourself. If your passport number was exposed, JAL will tell you directly.

Sources

The Record, Aviation Wire and Privacy Guides, October 28-30, 2026.

FAQ

Should I replace my passport?

Follow JAL's direct notice and your passport office's guidance. A passport number alone is mostly a phishing and identity risk, so be extra careful with messages.

Did my card leak?

JAL says credit card numbers were not compromised.