Wire · technology
Amadeus Flaw Clouds 38 Months of Airline Data [2026]
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 2 November 2026 · Fusion42 review
Amadeus, a critical third-party reservation system provider for airlines including Malaysia Airlines, disclosed a booking-display vulnerability affecting customer data from August 2023 to September 2026—38 months of exposure. The flaw exposed data through a vendor-side system rather than direct airline compromise, highlighting cascading third-party risk across the aviation sector.
This Wire brief sits within Fusion42's coverage of Travel Tech, and 3 sources have reported it.
◆ ◆ The Wire takeaway
Your airline customer's data sat in a vendor system for 38 months before anyone noticed—and Amadeus is the backbone of the industry. If you build travel tech or sell to airlines, you're now competing against the vendor-risk conversation every procurement team is having this week.
◆ Coverage
3 sources · 2 Nov 2026
◆ Related on Wire
◆ Topics