Wire · technology
Vendor cyber risk in focus as Amadeus breach hits airlines globally
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 2 November 2026 · Fusion42 review
Amadeus IT Group's breach of its airline booking systems exposed customer records across Qantas, Cathay Pacific, Japan Airlines, and Malaysia Airlines, affecting over 145,000 bookings across a three-year window (August 2023–September 2026). The incident exposes a critical gap in cyber insurance coverage: policies often fail to respond adequately when breaches originate in third-party vendor infrastructure rather than the insured's own network.
This Wire brief sits within Fusion42's coverage of Insurtech.
◆ ◆ The Wire takeaway
Cyber insurers now face simultaneous claims from dozens of airline clients for a single vendor breach—but most policies won't respond because the insured's own network wasn't compromised. This three-year Amadeus window is forcing policy language rewrites; brokers renewing travel tech clients this quarter need to specify vendor breach coverage explicitly or lose the account to carriers who've already been hit.
◆ Coverage
1 source · 2 Nov 2026
◆ Related on Wire
◆ Topics