Korean Air and Asiana Airlines report customer data breach

Korean Air and Asiana Airlines have confirmed that customer personal information was leaked through a security breach at Amadeus IT Group, a global provider of reservation and ticketing software used by both carriers.

The breach occurred via unauthorized access using compromised login credentials. While the exact timeframe is under investigation, the incident is estimated to have taken place between August 2023 and September 2024. Korean Air confirmed that leaked data includes customer reservation numbers, while Asiana Airlines noted that although reservation information was compromised, payment-related data was not affected as it is processed through a separate system.

Both airlines stated that their internal databases were not directly breached. They have implemented security measures and are demanding enhanced protection and prevention plans from Amadeus. Customers have been advised to remain vigilant against phishing attempts, such as suspicious links or requests for personal information, to prevent secondary damage.