According to Finnair, the affected flight lists contained approximately 116,000 of its reservations. Around 750 bookings were accessed without authorisation, including 30 relating to Aurinkomatkat package holidays.
The distinction matters: reservations appearing on the affected lists were not all individually accessed.
Only a small proportion of the accessed reservations remained active. Finnair replaced their booking references to prevent further unauthorised access.
Amadeus informed the airline that the unauthorised activity had been stopped. Finnair’s own systems were not compromised, and the statement says that credit card numbers and passwords were not accessed.
Finnair identifies Amadeus as the data controller responsible for notifying affected individuals. The airline is also contacting customers whose data was accessed where Amadeus has provided their contact details.
Finnair advises customers to remain alert to suspicious emails, text messages and phone calls.
More on Amadeus.
Header: © Finnair