Evidence of customer flight booking number leak at NH NongHyup Travel
SpilloverSpillover from the Amadeus incident · View original incident →Evidence indicated that some NH NongHyup Travel customers' flight booking numbers had been leaked through unauthorised access to the Amadeus system using authentication credentials. The incident is estimated to have occurred between August 2023 and September 2026. NH NongHyup Travel published a notice on 4 November 2026 and is investigating which customers' data was actually leaked, what additional data was exposed and the extent of the impact.
Key facts
- Affected organisation
- NH NongHyup Travel
- Original incident
- Amadeus reservation system breach exposes passenger data at multiple airlines
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Unauthorised access using authentication credentials for the Amadeus system
- Location
- South Korea
If your data was exposed
Exposed dataUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organisation’s official domain before using it.
Timeline
- NH NongHyup Travel announced a possible leak of customers' personal information relating to flight bookings following a breach of the Amadeus system.
- Evidence of a leak of some customers' flight booking numbers was confirmed, while additional exposed data and the extent of the impact remain under investigation.
Original incident
This is spillover from the Amadeus incident.
Amadeus reservation system breach exposes passenger data at multiple airlines
Impact: Passenger booking data exposed at multiple airlines
Unauthorised access to the reservation system of Spanish travel technology company Amadeus exposed passenger booking data at multiple airlines. Alongside names and itinerary details, some passport numbers and contact details were exposed, with Japan Airlines, ANA and Cathay Pacific among the affected airlines. Further reports followed from Korean Air, Asiana Airlines and others, while Thailand's aviation authorities confirmed that Thai Airways and Bangkok Airways were affected among seven major airlines.
Related reports: 9 · last report →
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.