Cathay Pacific Airways Ltd. said Wednesday that data for about 9.4 million passengers of Cathay and its unit Hong Kong Dragon Airlines Ltd. had been accessed without authorization.