All Nippon Airways (ANA) said on October 29 that its booking data had been accessed without authorization. The airline learned of the breach after a report from Amadeus IT Group, the Spanish company that provides its passenger service system, and said there are signs a third party viewed some customers' personal information.
ANA is working with Amadeus to identify the scope of the breach and will notify affected customers once details are known. The airline has not disclosed how many people are affected, what information was involved, or when the unauthorized access took place.
A passenger service system handles reservations, ticketing and check-in as a single operation. ANA began using Amadeus for international flights in April 2015 and moved domestic flights onto it from its own system in May 2026. In a 2023 announcement, the airline cited converting system costs to variable costs and streamlining operations that had been split between domestic and international flights.
Other airlines report breaches on the same system
Japan Airlines (JAL) and Japan Transocean Air said on October 28 that booking data for about 92,000 people had been accessed without authorization. For about 2,000 of them, passport numbers and contact details were also involved.
Korean Air and Asiana Airlines said on October 23 that some customers' booking numbers appeared to have leaked from Amadeus's system.