SAS has filed a report with the Swedish Data Protection Authority (IMY) about the incident. The airline states in the report that the leak primarily concerns older bookings and completed trips. It is said to involve booking references, dates, information about the number of passengers and flight-related information.
A total of 350,164 people are affected by the incident, according to SAS. The company has chosen not to inform the affected travellers, but that decision may change if more information becomes available.
The leak occurred in the global booking tool Amadeus, which a number of airlines use.
“SAS is aware of the security incident that Amadeus has reported and has been informed that certain booking information related to SAS has been affected,” SAS writes in a comment to SVT.
The airline further writes that “necessary notifications to relevant regulatory authorities” have been made.
Finnair is also affected by the incident. In a press release, Finnair writes that around 116,000 of the company's flight reservations may be affected. The data leak does not only involve Finnair but also other airlines.
On Friday, NRK reported that unauthorised parties may have had access to data in the Amadeus reservation system for up to three years. This included passengers on Norwegian.
What do you think?