---
title: Korean Air and Asiana say customer reservation data was taken from Amadeus, their shared booking provider, through an account with stolen login credentials | ctxsec
url: https://ctxsec.com/items/amadeus-account-breach-korean-air-asiana-reservations
description: ""
status: "confirmed by Korean Air (customer notice) and Asiana statements, reported by Yonhap and others Oct 23; Amadeus has not published a statement; number of people and full data types not yet known; other airlines' exposure unknown"
published: 2026-10-25
---

> 

[← Cybersecurity News](/news) · [markdown](/items/amadeus-account-breach-korean-air-asiana-reservations.md)

confirmed by Korean Air (customer notice) and Asiana statements, reported by Yonhap and others Oct 23; Amadeus has not published a statement; number of people and full data types not yet known; other airlines' exposure unknown

2026-10-25

### Korean Air and Asiana say customer reservation data was taken from Amadeus, their shared booking provider, through an account with stolen login credentials

Korean Air and Asiana Airlines say **Amadeus IT Group**, which runs reservation and ticketing systems for many airlines, notified them on the night of **Oct 20** (KST) of a suspected leak of customer data from its systems. Korean Air's notice to customers says the cause was unauthorized access using login credentials assigned to an account in Amadeus's system, sometime between **August 2023 and September 2026**, with the exact timing still under investigation.

- **Korean Air:** booking reference numbers are confirmed among the exposed data; other data types are still being checked with Amadeus. It found no sign of intrusion into its own systems and has emailed affected customers.
- **Asiana:** reservation information was exposed; payment data was not, because payments run on a separate system.
- **Amadeus:** the airlines say it has blocked the access and turned on dark-web monitoring. Neither the number of affected customers nor whether other carriers are involved has been disclosed.

A booking reference plus a surname is often enough to open and change a booking online, so watch for unexpected changes and for phishing that cites a real itinerary.

Sources: [Yonhap: personal data leak at Korean Air's reservation and ticketing system operator (Oct 23, Korean)](https://www.yna.co.kr/view/AKR20261023182300003?section=industry%2Ftechnology-science) · [MoneyToday, quoting Korean Air's customer notice (Oct 23)](https://www.mt.co.kr/en/industry/2026/10/23/2026102321111316820) · [The Herald Business: Korean Air, Asiana breach through shared booking system (Oct 23)](https://biz.heraldcorp.com/article/10913324)