Following the data security incident identified by Amadeus IT Group S.A. (Amadeus), the provider of reservation and passenger service system for Thai Airways International Public Company Limited (SET: THAI), which occurred between 10 August 2023 and 23 September 2026, THAI wishes to provide the following clarification.
THAI confirms that the incident originated within Amadeus’ system and was not the result of any cyberattack on, or unauthorized access to, THAI’s information technology systems. Several other leading airlines have also affected by similar incidents.
The investigation and impact assessment indicate that the incident has not affected THAI’s passengers as a whole or compromised their credit card details. THAI confirms that its information technology systems remain secure and are operating normally.
THAI continues to closely monitor the situation and conduct ongoing assessments, while implementing relevant measures to ensure the highest level of protection for passengers’ personal data. To date, the investigation has found no evidence that passengers’ information has been unlawfully misused.
THAI places the utmost importance on personal data protection and has reported the incident to the relevant authorities. THAI sincerely apologizes for any concerns or inconvenience arising from this incident.
