INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Overseas IT company behind security breach of Korean Air data
Executive Summary
AI-generated
South Korea's two major airlines, Korean Air and Asiana Airlines, have seen their customers' personal information leaked through a global airline IT company Amadeus that both airlines use. The incident occurred on the 23rd when a security breach in Amadeus' external system used by FSC resulted in data leak of customer information related to reservations for both Korean Air and Asiana Airlines. According to the aviation industry, this is an example of a data leak tactic where sensitive information was leaked without authorization. The affected customers are from Korea, Republic of, with no direct breach of their databases but payment-related information remained secure. Amadeus is currently conducting dark web monitoring to investigate unauthorized access and determine if the leaked information is being illegally distributed.
Technical Mitigations AI-generated
• Implement additional security measures and a re-incident prevention strategy for Amadeus' system.
• Conduct dark web monitoring to investigate unauthorized access and determine if leaked information is being illegally distributed.
• Block or hunt for indicators of payment-related information leaks, as this was stated to be unaffected by the breach.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Incident Timeline
Intelligence Sources
Chosun Economy
2026-10-23