Overview
- Korean Air confirmed an employee data leak linked to a cyberattack on catering vendor KC&D, disclosed to staff on Dec. 29.
- Exposed information included names, phone numbers and bank account numbers, with about 30,000 records reported affected.
- The airline completed emergency security checks, reported the incident to authorities and warned employees to watch for suspicious texts or emails.
- Korean Air says customer information does not appear to be impacted as the investigation continues.
- KC&D, a former subsidiary sold to Hahn & Company in 2020, was asked to analyze the breach, which follows recent disclosures at Asiana Airlines, Coupang, KT and Shinhan Card.