According to the notices sent to customers by Korean Air and Asiana Air, it was revealed that personal information used in their reservation systems had been leaked externally. The two airlines notified customers of the incident via email on the 23rd, and the leaked data mainly included booking numbers and related payment information.
The incident is presumed to have occurred through an IT partner named Amadeus. Amadeus is a global company that provides software solutions to airlines, hotels, travel and other industries, with over 400 airlines worldwide using the system. Korean Air stated that it received notification of the leak from Amadeus on the 20th and implemented immediate security measures.
The extent of damage confirmed so far has not yet been determined, but the fact that customers’ payment-related information was leaked externally is noteworthy. A Korean Air representative said, “There is no evidence that our own systems were breached, and a second‑party incident has not been identified,” adding that an investigation is underway to determine whether the leaked data is linked to actual transaction amounts.
The airlines have advised customers to avoid clicking on unknown links or downloading attachments, and not to provide personal information. They also announced plans to strengthen internal security controls by engaging external auditors and conducting system checks.