Data breach exposes travel details of 144,000 Norwegian and Widerøe passengers

Data on 144,249 Norwegian and Widerøe passengers has been leaked in a data breach at Spanish IT provider Amadeus, according to a letter Norwegian sent to the Norwegian Data Protection Authority. Norwegian says it is continuously assessing whether to notify affected passengers. The breach, which became known on October 27 and is believed to have started in 2023, gave a threat actor access to travel details for 75 Norwegian state and private companies, potentially including the military. Travel agency Berg-Hansen is also known to be affected. Amadeus, a Madrid-based booking platform for flights, hotels, and trains, said it discovered a vulnerability in its booking display system, making certain booking data accessible. No payment information was compromised. SAS has previously reported 350,000 affected passengers across four countries.