Caribbean Airlines is notifying customers after an unauthorised party accessed passenger booking and travel information through a security vulnerability in its reservations service provider, Amadeus IT Group.

The airline says preliminary findings indicate that no payment card information was accessed and that the breach was limited to booking and travel data. However, it has not specified exactly what passenger information was exposed or how many customers were affected.

The incident also affected several other international airlines served by Amadeus, including Japan Airlines, Singapore Airlines, Cathay Pacific, Finnair, Thai Airways, Korean Air and Qantas, the airline said in a statement today.

Caribbean Airlines says its priority is to notify affected passengers, with that process ongoing. Amadeus has since fixed the vulnerability and strengthened its monitoring and detection systems.

The airline has apologised for the concern caused and says it remains committed to protecting customers' personal information.