Koreatimes.Co.Kr Data Breach at Amadeus Affects Korean Air and Asiana Airlines
Article Content
- •Korean Air and Asiana Airlines suffered a data breach due to a vulnerability in Amadeus IT Group.
- •Customer reservation information was leaked, but payment data remains secure.
- •The breach highlights vulnerabilities in the airline industry's reliance on third-party IT providers.
A data breach involving Amadeus IT Group has led to the exposure of customer reservation information from Korean Air and Asiana Airlines. The breach, which is believed to have occurred between August 2023 and September 2023, resulted from unauthorized access using login credentials for accounts in Amadeus's system. Both airlines confirmed that booking-related information was leaked, including customer reservation numbers, but payment-related data was not affected. Neither airline found evidence of a direct breach of their internal systems. Following the notification from Amadeus on October 20, 2026, both airlines activated security measures and are investigating the full scope of the breach. Amadeus is also taking steps to block unauthorized access and monitor the dark web for potential misuse of the leaked data.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Amadeus IT Group in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What type of data was leaked?
Are my personal details safe?
What actions are the airlines taking?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…