Amadeus cyber incident may have compromised customer data, BNM warns

Bank Negara Malaysia (BNM) has issued a public notice regarding a cybersecurity incident involving Amadeus, a global travel and hospitality technology provider, that may have compromised certain customer information processed through its systems.

According to BNM's advisory, the incident potentially affected customer data that was processed between August 2023 and September 2026. The central bank did not specify the number of individuals or the full scope of information that may have been compromised in the breach.

Amadeus provides critical reservation and ticketing systems used by airlines, hotels, and travel agencies across the region. The company, which operates in over 190 countries, has not publicly disclosed detailed information about the extent or nature of the data exposure in Malaysia.

BNM has recommended that individuals who may have been affected monitor their personal and financial information closely for any suspicious activity. Customers are advised to contact their respective financial institutions or travel service providers for further clarification on what data may have been impacted.

The cybersecurity incident underscores ongoing vulnerabilities in digital infrastructure serving the financial and travel sectors across Southeast Asia, prompting regulators to strengthen oversight of data protection measures among critical service providers.