2026 Korean Air — Amadeus reservation-system breach exposed booking reference numbers; no customer count given
Data compromised
Booking reference (reservation) numbers, the only item confirmed so far. Korean Air says payment card numbers were not included. Other leaked items are still being verified. The customer count has not been stated.
Technical writeup
According to Korean Air, Amadeus has blocked the unauthorised account and is monitoring the dark web for the leaked data. Korean Air has asked Amadeus for stronger protections to prevent a repeat. Korean press reports say the airline reported the incident to the Personal Information Protection Commission and emailed affected customers on October 23. The company says no secondary harm has been confirmed so far.
Root cause
Amadeus, the reservation provider, told Korean Air late on October 20, 2026 that personal data may have leaked. Korean Air says an intruder used login credentials assigned to an account in Amadeus's system. The estimated access window is August 2023 to September 2026, and the exact timing is still under investigation. Korean Air says there are no signs of intrusion into its own database.