INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Amadeus Breached by Unauthorized Access

| 2026-10-24 10:29 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
South Korea's national carrier, Korean Air, and its subsidiary, Asiana Airlines, have suffered a data breach involving customer reservation information that was leaked through an external IT service provider, Amadeus Systems. The breach occurred between August 2023 and September 2026, although the exact timing of the breach is still under investigation. The two airlines were informed of the breach on October 20th last month by the global airline IT systems operating company, Amadeus IT Group. Asiana Airlines stated that reservation-related information was leaked, while Korean Air understood that customer reservation numbers were affected. The total number of victims and reservation numbers are still unknown, but it is believed to be in the thousands. The breach occurred through unauthorized access using login credentials provided to the Amadeus Systems account, with the method by which these credentials were secured or exploited not yet confirmed.
Technical Mitigations AI-generated
• Patch the Amadeus Systems account using a secure login credential management system to prevent unauthorized access. • Implement multi-factor authentication for external IT service providers, such as Amadeus, to add an additional layer of security. • Regularly monitor and analyze logs from the airline's internal database to detect potential breaches or suspicious activity related to the compromised Amadeus account.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
aviationaviation
Incident Timeline
‎August 2023
Threat actors exploited vulnerabilities in Amadeus's systems to gain unauthorized access, resulting in the leak of customer information for Korean Air and Asiana Airlines between August 2023 and September 2026.
‎2026/09/24
Amadeus IT Group informed Korean Air and Asiana Airlines of a breach on October 20th, last month, which involved unauthorized access to their customer information.
organisation Amadeus IT Group
The two airlines were informed of the breach on October 20th last month by the global airline IT systems operating company, Amadeus IT Group.
‎September 2026
Threat actors exploited vulnerabilities in Amadeus's systems to gain unauthorized access, resulting in the leak of customer information for Korean Air and Asiana Airlines.
‎October 20th last month
Amadeus IT Group informed Korean Air and Asiana Airlines of a breach on October 20th last month, revealing unauthorized access to their customer information.
organisation Amadeus IT Group
The two airlines were informed of the breach on October 20th last month by the global airline IT systems operating company, Amadeus IT Group.
‎2026/10/24
Threat actors exploited an external IT service provider, Amadeus Systems, to gain unauthorized access to customer reservation information of Korean Air and Asiana Airlines.
organisation Amadeus Systems
South Korea's national carrier, Korean Air, and its subsidiary, Asiana Airlines, have suffered a data breach involving customer reservation information that was leaked through an external IT service provider, Amadeus Systems.
organisation Korean Air
Korean Air and Asiana Airlines customer information leaks...
organisation Asiana Airlines
Korean Air and Asiana Airlines customer information leaks...
organisation Amadeus
Reservation and ticketing entrusted to Amadeus, unauthorized access.
Intelligence Sources
Dailysecu 2026-10-24