Korean Air security incident history
Hacking, data breaches and other security incidents involving Korean Air, with related coverage.
Amadeus breach exposes 106,661 Korean Air customer booking records
↳ Knock-on damage from the Amadeus incident · View original incidentImpact: 106,661 customer booking records (PNRs)
Unauthorised access using account login credentials at Amadeus, Korean Air’s reservation and ticketing systems partner, exposed 106,661 customer booking records. Amadeus blocked further access by the account on 23 September but notified Korean Air 27 days later, on 20 October. The customer data breach and an investigation into its scope became public on 23 October, and follow-up reporting in November confirmed the precise number of exposed records and the notification delay.
Related reports: 21 · last report →Partner hack leaks about 30,000 records of Korean Air employees
30kImpact: About 30,000 records of employees' personal information, including names and bank account numbers
Servers at KC&D Service, Korean Air's in-flight catering and in-flight sales partner, were hacked, leaking about 30,000 records of Korean Air employees' personal information, including names and bank account numbers. The partner became aware of a possible incident in November 2025 after spotting a post on the dark web in which a hacking group claimed the leak. Korean Air disclosed the leak of employees' personal information in December.
Related reports: 14 · last report →Korean Air accused of leaking cabin crew's illnesses, divorce status and other personal data
Impact: Personal information of cabin crew, including personal illnesses and divorce status
Allegations surfaced that personal information of Korean Air cabin crew, including personal illnesses and divorce status, had been leaked. There were also allegations that when crew members took leave, their personal information was shared regardless of their wishes.
Related reports: 3 · last report →