A Korean Air data leak has been identified within the airline’s reservation and ticketing system operating partner, raising security concerns for customers.
Amadeus System Breach and Notification
According to industry sources on the 23rd, Korean Air was notified late on the 20th by Amadeus, a global aviation IT system operator and contractor, that signs of personal data leakage had been confirmed through its system.
Amadeus is a global IT enterprise providing software utilized across airlines, hotels, travel agencies, and other travel-related industries. This incident is presumed to have stemmed from unauthorized access using login credentials assigned to an Amadeus system account.
The timing of the occurrence is estimated to have taken place between August 2023 and September 2026, though the exact timeframe remains under active investigation.
Impact on Customers and Response
Upon receiving the notification, Korean Air immediately took necessary safety measures and determined that there were no signs of intrusion into its own proprietary systems and database.
However, it was confirmed that the personal data leaked through the Amadeus system included the reservation numbers of Korean Air customers. The exact scope of the leaked items is currently being verified by Amadeus, and customers will be notified as soon as further details are confirmed.
Korean Air stated that no secondary damage cases resulting from this incident have been confirmed to date, while urging customers not to respond to unknown links, file downloads, or requests for personal information.
Amadeus has reported to Korean Air that it is implementing measures such as blocking unauthorized access and operating dark web monitoring. Korean Air is demanding that Amadeus formulate additional preventive measures and solutions to avoid recurrence.
