Amadeus breach exposes 106,661 Korean Air customer booking records
SpilloverSpillover from the Amadeus incident · View original incident →Unauthorised access using account login credentials at Amadeus, Korean Air’s reservation and ticketing systems partner, exposed 106,661 customer booking records. Amadeus blocked further access by the account on 23 September but notified Korean Air 27 days later, on 20 October. The customer data breach and an investigation into its scope became public on 23 October, and follow-up reporting in November confirmed the precise number of exposed records and the notification delay.
Key facts
- Affected organisation
- Korean Air
- Original incident
- Amadeus reservation system breach exposes passenger data at multiple airlines
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- 106,661 customer booking records (PNRs)
- Cause / method
- Unauthorised access to booking records using login credentials for an account on partner Amadeus’s system
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- Amadeus blocked further access by the account involved.
- Amadeus notified Korean Air of the breach 27 days after blocking access.
- The Korean Air customer data breach and an investigation into its scope became public.
- The exposure of 106,661 customer booking records and the partner’s delayed notification were confirmed.
Original incident
This is spillover from the Amadeus incident.
Amadeus reservation system breach exposes passenger data at multiple airlines
Impact: Passenger booking data exposed at multiple airlines
Unauthorised access to the reservation system of Spanish travel technology company Amadeus exposed passenger booking data at multiple airlines. Alongside names and itinerary details, some passport numbers and contact details were exposed, with Japan Airlines, ANA and Cathay Pacific among the affected airlines. Further reports followed from Korean Air, Asiana Airlines and others, while Thailand's aviation authorities confirmed that Thai Airways and Bangkok Airways were affected among seven major airlines.
Related reports: 9 · last report →
Also affected by this incident
Asiana Airlines IT partner hack leaks customer reservation data
↳ Knock-on damage from the Korean Air incident · View original incidentIt was reported on 23 October 2026 that Amadeus, the IT partner that runs Asiana Airlines' reservation system, was hacked, leaking customer information such as booking reference numbers. The scale of the damage has not been confirmed.
Related reports: 16 →
21 related reports
- 대한항공 고객 정보 유출…“협력사 해킹”
- [속보] 대한항공서 고객 정보 유출…"고객사 해킹 피해"
- 대한항공, 협력사서 고객 정보 유출… “피해 규모 파악 중” - 조선비즈
- 대한항공 고객 개인정보 유출 정황…예약·발권 시스템 운영사 해킹
- 대한항공 고객 정보 유출…“협력사 해킹 피해”
- 대한항공 예약발권 운영사 고객 개인정보 유출…예약번호 포함, 피해 규모는 조사 중
- 대한항공 IT 시스템 운영사, 개인정보 유출 정황
- 대한항공·아시아나 예약발권 운영사에서 개인정보 유출
- 대한항공 고객 예약번호 유출, 협력사 아마데우스 시스템 해킹 피해
- 대한항공·아시아나 고객정보 유출..."해외 협력사가 뚫려"
- 대한항공·아시아나 고객정보 유출…협력사 해킹 파장
- 대한항공 고객 예약번호 유출... 글로벌 외주망 뚫린 ‘공급망 사고’
- 이번엔 대한항공·아시아나 예약 시스템 운영사서 고객정보 유출…피해 규모 조사 중
- 대한항공·아시아나, 개인정보 유출 확인…IT 협력사가 '구멍'
- 대한항공·아시아나 고객 정보 유출…“규모 파악 중”
- Korean Air and Asiana Airlines Data Breach via Amadeus: Cybersecurity Incident Analysis and Third-Party Risks
- 대한항공·아시아나항공 이어···진에어, 해킹공격으로 1454명 개인회원 정보 유출
- 글로벌 항공 예약시스템 ‘아마데우스’ 해킹…일본항공 9만2천 명 개인정보 노출, 최근 대한항공·아시아나도 피해
- [단독]대한항공 협력사, 해킹 차단하고 27일 뒤 알렸다…10.7만건 유출
- 대한항공 협력사, 해킹 차단 27일 만에 통보…데이터 10만건 유출
- "해킹 차단하고도 27일 뒤에야 알렸다"… 대한항공 협력사, 개인정보 유출 통보 지연 논란
Other incidents at Korean Air
Partner hack leaks about 30,000 records of Korean Air employees
30kImpact: About 30,000 records of employees' personal information, including names and bank account numbers
Servers at KC&D Service, Korean Air's in-flight catering and in-flight sales partner, were hacked, leaking about 30,000 records of Korean Air employees' personal information, including names and bank account numbers. The partner became aware of a possible incident in November 2025 after spotting a post on the dark web in which a hacking group claimed the leak. Korean Air disclosed the leak of employees' personal information in December.
Related reports: 14 · last report →Korean Air accused of leaking cabin crew's illnesses, divorce status and other personal data
Impact: Personal information of cabin crew, including personal illnesses and divorce status
Allegations surfaced that personal information of Korean Air cabin crew, including personal illnesses and divorce status, had been leaked. There were also allegations that when crew members took leave, their personal information was shared regardless of their wishes.
Related reports: 3 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.