What you need to know
What has changed
Thai Airways and Bangkok Airways say a security incident at their reservation provider, Amadeus, may have exposed some passenger booking information. On 12 November, The Thaiger reported that Thailand’s aviation regulator had identified the two carriers in a review of seven major Thai airlines. The regulator said the incident did not affect flight safety or airline operations.
What the airlines have disclosed
Thai Airways said about 60,529 records may have been accessed without authorisation. Its notice describes booking data held in Amadeus systems from 10 August 2023 to 23 September 2026. Information may have included names, booking references, travel dates and routes. The airline said a smaller group of about 376 records may also have contained details such as contact information, passport numbers or frequent flyer numbers.
Thai Airways said credit card information was unaffected and that it would contact affected passengers individually after verifying the details. Bangkok Airways separately said that some of its passenger booking information may have been affected. Its public notice did not give a count.
What passengers can do
Use your airline’s official website or app to check bookings and contact support. Be cautious with unexpected messages asking you to click a link, make a payment or provide passport details to resolve a booking problem. Open the airline’s site independently to verify a message before responding.
A booking record may contain enough information for a message to appear convincing. If you receive an incident notice, read the instructions through a verified channel and keep a copy. The airlines’ own notices and the regulator’s statement are linked below.
