InfoSecBulletin Cybersecurity for mankind
Employee data at Korean Air, South Korea’s largest airline, was leaked following a cyberattack on a partner firm that provides in-flight meals and onboard services, industry sources reported on Monday.
According to the sources, Korean Air issued an internal notice earlier in the day informing employees that KC&D, the airline’s catering and onboard sales supplier, had recently suffered a cyberattack by a hacker group.
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
It was the latest incident in a series of recent data breaches affecting major companies, including Coupang Inc., KT Corp. and Shinhan Card Co.
The airline reported that the breach exposed the personal data of Korean Air employees, including names and phone numbers, stored on KC&D’s servers.
Korean Air learned of the incident from KC&D and has implemented emergency security measures while informing the authorities.
Employees are advised to stay alert for possible secondary damage and to be cautious of suspicious texts or emails.
While Korean Air has yet to attribute the attack, the Clop ransomware gang has claimed responsibility for the KC&D attack in November and later published the allegedly stolen data on its dark web leak site, making it available for download via Torrent.
