Norwegian (Norwegian Air Shuttle, incl. Widerøe) data breach

Norwegian (Norwegian Air Shuttle, incl. Widerøe) announced a data breach on Nov 12, 2026 affecting about 144,249 people, exposing names, dates of birth, phone numbers and email addresses. It happened through a vendor (Amadeus (airline reservation system provider)). No settlement or compensation has been announced.

What happened

Information on 144,249 travelers with Norwegian and its subsidiary Widerøe was leaked in the breach of booking-system provider Amadeus, according to a letter Norwegian sent to Norway's data protection authority, reported by NRK and Denmark's DR on November 12, 2026. Earlier, aeroTELEGRAPH reported that names, dates of birth, contact details and in some cases passport information may have been taken, including bookings made over the past three years through the Norwegian business travel agency Berg-Hansen. In the letter Norwegian says it is still assessing whether the leak is serious enough to require informing those affected. The same Amadeus incident hit SAS, Finnair and Thai Airways.

What should I do?

1. Treat emails, texts and calls that quote your Norwegian or Widerøe booking or travel dates as suspect, especially offers of refunds, compensation or rebooking.
2. Manage bookings only through the Norwegian or Widerøe app or website, not through links in unexpected messages.
3. Don't give card details, passwords or one-time codes to anyone who contacts you about a flight.
4. If your passport number may be involved and you see signs of misuse, report it to the police and ask the passport office about a replacement.

Check the other services you use →