Japan Airlines said its IT provider Amadeus IT Group suffered a data breach affecting 92,000 customers of JAL and subsidiary Japan Transocean Air, with hackers accessing a "portion of customer reservation data" including names, reservation codes and flight information. For about 2,000 JAL customers, passport numbers, frequent-flyer numbers, email addresses and phone numbers were also taken; credit-card numbers were not compromised and flight operations were unaffected. JAL is contacting affected customers individually and warning of phishing and fraud. The breach lands in a week in which Japan has been hit across finance (GMO), telecom (So-net/Sony) and now aviation, and the Airline reservation ecosystem's reliance on a few global providers (Amadeus, Sabre, Travelport) means a provider-side compromise is functionally a supply-chain event for every carrier on the platform — the same reason airline PQ systems are a priority in Australian critical-infrastructure planning.

• Source article