Korean Air, Asiana Customer Information Leaked Through IT Service Provider

Estimated to have occurred between August 2023 and September 2026
No signs of breaches of Korean Air or Asiana Airlines' own systems

Customer information from Korean Air and Asiana Airlines was leaked through an IT service provider.

Korean Air and Asiana Airlines aircraft are parked at Gimpo International Airport in Gangseo-gu, Seoul. Yonhap News Agency.

According to Korean Air and Asiana Airlines on October 23, signs were found that personal information had been leaked from the systems of Amadeus, a global aviation IT systems operator that provides services to the airlines.

An investigation into the data breach is underway. It has been confirmed that the incident resulted from unauthorized access using login credentials assigned to an account in Amadeus' system.

The leak is believed to have occurred between August 2023 and September 2026, but the exact timing is still under investigation.

Korean Air was notified of the leak by Amadeus at around 10:44 p.m. on October 20 and took the necessary security measures. No signs of a breach of Korean Air's own systems have been found.

A Korean Air official said, "Amadeus is taking measures such as blocking unauthorized access and monitoring the dark web, but we are demanding stronger protective measures and steps to prevent a recurrence. We take this situation very seriously and plan to make every effort to prevent further damage and a recurrence."

An Asiana Airlines official said, "We have confirmed that reservation-related information was leaked due to the data breach at Amadeus, but payment-related information was not included. There are no signs of a direct breach of our internal database, but we are strengthening our security measures. We will make every effort necessary to protect customers' personal information and prevent further damage and a recurrence."

This content was produced with the assistance of AI translation services.