Attention! Korean and Asiana Airlines customer personal information leaked, affected by security vulnerabilities in outsourced IT systems

South Korea's Korean Air and Asiana Airlines said on the 23rd that a security vulnerability occurred in outsourced IT company Amadeus, resulting in the leakage of customer booking and other information. As for the number of victims and the scope of the leaked personal information, it remains to be clarified.

According to the Chosun Ilbo, Amadeus is an IT company that provides reservation and ticketing software services to many airlines, hotels and travel agencies around the world. Korean Air received a notice from Amadeus on the evening of the 20th, alleging the risk of leakage of customer personal information.

Korean Air currently confirms that the leaked content includes the booking flight number. It is not clear whether the detailed number of people and other information has been leaked. As for Korean Air's own system, it has not been invaded; Asiana Airlines emphasizes that customer payment information has not been affected and its own database has not been leaked.

Amadeus blocks unauthorized access and continuously monitors the dark web to determine if any information is being illegally distributed. Both Korean Air and Asiana Airlines asked Amadeus to take additional safety measures to prevent similar situations from happening again.