Partner hack leaks about 30,000 records of Korean Air employees
Servers at KC&D Service, Korean Air's in-flight catering and in-flight sales partner, were hacked, leaking about 30,000 records of Korean Air employees' personal information, including names and bank account numbers. The partner became aware of a possible incident in November 2025 after spotting a post on the dark web in which a hacking group claimed the leak. Korean Air disclosed the leak of employees' personal information in December.
Key facts
- Affected organisation
- Korean Air
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- About 30,000 records of employees' personal information, including names and bank account numbers
- Cause / method
- Hacking of servers at KC&D Service, an in-flight catering and in-flight sales partner
- Location
- South Korea
If your data was exposed
Exposed dataNameBank account
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- The leak of Korean Air employee information following the hacking of an in-flight catering company was reported.
- The leak was reported to involve about 30,000 records, including names and bank account numbers.
14 related reports
- 대한항공 직원 정보도 유출…기내식 업체 해킹 여파
- 대한항공, 납품업체 해킹으로 임직원 개인정보 유출
- 대한항공도 임직원 개인정보 3만건 유출
- 대한항공 임직원 개인정보 3만건 유출…기내식 업체 서버 뚫렸다
- 대한항공 임직원 개인정보 유출돼…납품업체 해킹당해
- 대한항공, 기내식 협력사 해킹으로 임직원 개인정보 3만건 유출
- 대한항공 기내식 협력사 해킹, 임직원 개인정보 3만건 유출
- 대한항공, 임직원 개인정보 3만건 유출
- 대한항공, 기내식 업체 해킹으로 계좌번호 등 임직원 개인정보 유출
- Korean Air Employee Data Breach Clop Ransomware Supply Chain Attack Report
- Korean Air discloses data breach after the hack of its catering and duty-free supplier
- 아시아나 이어 대한항공까지… 임직원 이름·계좌번호 털렸다
- 아시아나 이어 대한항공도 해킹…개인정보 줄줄이
- ‘분리 매각 5년인데’…협력업체 해킹에 ‘대한항공 임직원 개인정보’ 3만여 건 유출
Other incidents at Korean Air
Amadeus breach exposes 106,661 Korean Air customer booking records
↳ Knock-on damage from the Amadeus incident · View original incidentImpact: 106,661 customer booking records (PNRs)
Unauthorised access using account login credentials at Amadeus, Korean Air’s reservation and ticketing systems partner, exposed 106,661 customer booking records. Amadeus blocked further access by the account on 23 September but notified Korean Air 27 days later, on 20 October. The customer data breach and an investigation into its scope became public on 23 October, and follow-up reporting in November confirmed the precise number of exposed records and the notification delay.
Related reports: 21 · last report →Korean Air accused of leaking cabin crew's illnesses, divorce status and other personal data
Impact: Personal information of cabin crew, including personal illnesses and divorce status
Allegations surfaced that personal information of Korean Air cabin crew, including personal illnesses and divorce status, had been leaked. There were also allegations that when crew members took leave, their personal information was shared regardless of their wishes.
Related reports: 3 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.