Caribbean Airlines confirms passenger reservations data breach, says payment card details unaffected

See below full statement from Caribbean Airlines:

Port of Spain, Trinidad and Tobago, November 15, 2026: Caribbean Airlines has been informed by Amadeus IT Group, S.A., its reservations service provider, that an unauthorised party exploited a vulnerability to gain access to booking and reservation information. Several international airlines served by Amadeus IT Group, S.A. were also affected by the incident. These airlines include Japan Airlines, Singapore Airlines, Cathay Pacific, Finnair, Thai Airways, Korean Air and Qantas. Caribbean Airlines reassures its customers that the preliminary data from Amadeus suggests that no payment card data was accessed and that the breach was limited to passengers’ booking or travel data. The airline’s primary concern is notifying affected customers of the incident, and this process is ongoing. Amadeus has since fixed the vulnerability and strengthened its monitoring and detection capabilities. Caribbean Airlines takes the protection of personal information seriously and remains committed to safeguarding its customers’ data by maintaining the highest standards in security and privacy measures. Caribbean Airlines apologises to its customers for the concern and inconvenience caused by this incident.