Thai Airways International data breach

Thai Airways International announced a data breach on Nov 9, 2026 involving up to 60,529 records (duplicates possible), exposing names, email addresses, phone numbers and passport numbers. It happened through a vendor (Amadeus (airline reservation system provider)). No settlement or compensation has been announced.

What happened

Thai Airways said on November 9, 2026 that Amadeus, which runs its passenger service systems, told it that booking data stored in Amadeus systems was accessed without authorization between August 10, 2023 and September 23, 2026. About 60,529 passenger records may have been accessed, covering passenger names, booking references (PNR), travel dates, flight routing and cabin class. For about 376 more records, the data may also have included email addresses, phone numbers, passport numbers, nationality, frequent flyer numbers, ticket and seat numbers. The airline says credit card data was not affected, its own systems were not hit, and it has informed the authorities.

What should I do?

1. Treat emails, texts and calls that quote your Thai Airways booking reference or flight details as suspect, especially refund, compensation or rebooking offers.
2. Manage bookings and Royal Orchid Plus matters only through the THAI app or thaiairways.com, not through links in unexpected messages.
3. Never give card details, passwords or one-time codes to someone who contacts you about a booking.
4. If you are told your passport number was involved, watch for identity misuse and ask your passport authority about replacing it if you see any.

Check the other services you use →