"This Time, It's an Airline"... Jin Air Members' Personal Information Leaked in Hacking Attack, 1,454 Affected

Personal information belonging to 1,454 Jin Air members was leaked in an external hacking attack.

Jin Air announced on its website on October 29 that it had "confirmed signs of abnormal external access to its internal systems" and that "the information of a total of 1,454 members was confirmed to have been leaked in this incident."

Jin Air said, "The investigation into the incident is ongoing, but based on what we have determined so far, an abnormal external attack targeted the application programming interface (API) used to look up member information. We confirmed the incident the previous day and completed protective measures, including blocking the attacker's IP address."

The leaked information included user IDs, names, dates of birth, gender, nationality, mobile phone numbers, email addresses, and the dates and times of recent logins. Jin Air said that highly sensitive information that could be misused, such as passwords, financial information, and payment histories, was not leaked.

Jin Air said, "No cases of fraudulent use related to this incident have been identified so far," and urged members to "avoid clicking on links or downloading attachments from unclear sources, or responding to requests to enter personal information, to prevent secondary 피해."

Jin Air said that after becoming aware of the incident, it took necessary security measures, including notifying the Personal Information Protection Commission, and fully blocked access to the system identified as the attack vector before deleting it entirely. It added that it had reexamined its company-wide security systems and vulnerabilities and significantly strengthened security by activating a 24-hour emergency monitoring system.

This content was produced with the assistance of AI translation services.