Condor has confirmed that some of its customer records were affected by a security incident involving a booking-display system operated by travel technology provider Amadeus. The German leisure airline has not disclosed how many customers were involved or which data fields were exposed. Amadeus indicated that payment data was not affected; Condor is contacting customers for whom it has contact details and will notify agency and other partner bookings through those channels.
Amadeus disclosed in October that a vulnerability in a travel booking display environment had made certain booking data accessible. The company has taken steps to fix it and strengthen monitoring, but its investigation remains ongoing. It reported no evidence that payment or financial data had been accessed.
Condor has not provided its own timeframe for the access or a date when it was notified. Japan Airlines reported that unauthorized access to its reservation data ran from 10 August 2023 to 23 September 2026; airlines began learning of the issue in late October. Other carriers, including ANA, Cathay Pacific and Singapore Airlines, have also reported affected records. Their disclosed figures do not establish the scale of the impact on Condor.