Korean Air has confirmed indications of a data breach involving customer personal information through its reservation and ticketing system. The exact scale of the breach and the circumstances surrounding it are currently under investigation.
According to Yonhap News on October 23, Korean Air was notified on October 20 by Amadeus, a global airline IT system operator, about the potential data leak through its system. Amadeus provides software used by airlines, hotels, travel agencies, and other travel-related industries.
The incident is believed to have occurred due to unauthorized access using login credentials for an Amadeus system account. The breach is estimated to have taken place between August 2023 and last month, although the specific timing and details of the intrusion have not yet been clarified.
It has been confirmed that the leaked personal information includes reservation numbers of Korean Air customers. The extent and specific details of the data leak are still being verified.
Korean Air stated that it took necessary safety measures immediately upon receiving the notification and has determined that there are no indications of a breach in its own systems and databases.
Amadeus is reportedly implementing measures to prevent further unauthorized access and is monitoring the dark web to mitigate additional risks.
Korean Air emphasized that it is taking the situation seriously and is committed to preventing further damage and recurrence. The airline is also demanding enhanced protective measures and preventive strategies from Amadeus.
Additionally, Korean Air plans to conduct thorough inspections of its contractors to strengthen measures for protecting customer information.
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.