IT · 2026-10-24
Korean Air and Asiana Customer Information Leaked in Amadeus Reservation System Incident
An unauthorized access incident occurred in the system of Amadeus, the global aviation IT company used by Korean Air and Asiana Airlines, exposing reservation-related customer information. The exact timing and full scope of the leak are still under investigation, and Asiana said payment information was not leaked.
It is easy to assume that booking a flight only involves the airline’s own system, but reservation and ticketing tasks can also rely on external IT companies. This time, signs of a customer information leak were found in the system of Amadeus, the global aviation IT company used by Korean Air and Asiana Airlines.
According to a report by MyDaily, both airlines were notified by Amadeus on the 20th of signs of a personal information leak. The incident is understood to have occurred through unauthorized access using login credentials for an Amadeus system account. The access is believed to have taken place sometime between August 2023 and last month, but the exact timing of the leak is still under investigation.
The information confirmed so far includes Korean Air customers’ reservation numbers. Asiana Airlines also stated that reservation-related information was leaked. However, Asiana explained that it operates its payment system separately, so payment-related information was not exposed. The full scale of the leak and the specific personal data involved have not yet been confirmed.
Both airlines said they found no signs of a direct breach in their own systems or internal databases. Still, since the exposure occurred in an outside operator’s system, it would be difficult to say that customers need not remain cautious simply because the airlines’ own systems appear unaffected. Given the possibility that information containing flight reservation numbers could be misused, customers should be wary of messages or links whose source is unclear.
The airlines have sent emails to customers notifying them of the leak and have begun strengthening security measures. Korean Air advised customers not to open suspicious links or attachments and to be cautious of messages asking for personal information. It plans to provide another update if additional leaked details are confirmed. Amadeus has also reportedly taken follow-up measures, including blocking unauthorized access and monitoring the dark web.
Because the Amadeus system is used by many airlines, attention is now focused on whether the damage has spread to other carriers as well. As of the time of reporting, however, no additional 피해 had been confirmed. This incident shows that personal data protection depends not only on how companies store and manage customer information directly, but also on the security posture of outside vendors entrusted with business operations. The scope of the leak and any further damage will need to be confirmed through the investigation results and follow-up notices from the airlines.
Source: MyDaily
According to a report by MyDaily, both airlines were notified by Amadeus on the 20th of signs of a personal information leak. The incident is understood to have occurred through unauthorized access using login credentials for an Amadeus system account. The access is believed to have taken place sometime between August 2023 and last month, but the exact timing of the leak is still under investigation.
The information confirmed so far includes Korean Air customers’ reservation numbers. Asiana Airlines also stated that reservation-related information was leaked. However, Asiana explained that it operates its payment system separately, so payment-related information was not exposed. The full scale of the leak and the specific personal data involved have not yet been confirmed.
Both airlines said they found no signs of a direct breach in their own systems or internal databases. Still, since the exposure occurred in an outside operator’s system, it would be difficult to say that customers need not remain cautious simply because the airlines’ own systems appear unaffected. Given the possibility that information containing flight reservation numbers could be misused, customers should be wary of messages or links whose source is unclear.
The airlines have sent emails to customers notifying them of the leak and have begun strengthening security measures. Korean Air advised customers not to open suspicious links or attachments and to be cautious of messages asking for personal information. It plans to provide another update if additional leaked details are confirmed. Amadeus has also reportedly taken follow-up measures, including blocking unauthorized access and monitoring the dark web.
Because the Amadeus system is used by many airlines, attention is now focused on whether the damage has spread to other carriers as well. As of the time of reporting, however, no additional 피해 had been confirmed. This incident shows that personal data protection depends not only on how companies store and manage customer information directly, but also on the security posture of outside vendors entrusted with business operations. The scope of the leak and any further damage will need to be confirmed through the investigation results and follow-up notices from the airlines.
Source: MyDaily
Source: 대한항공·아시아나 고객정보 유출…외부 시스템서 사고
Related search terms
#Korean Air customer information leak#Asiana Airlines data breach#Amadeus reservation system incident#airline reservation information leak#personal information breach in airline booking system#Korean Air and Asiana security notice