InfoSecBulletin Cybersecurity for mankind
Employee data at Korean Air, South Korea’s largest airline, was leaked following a cyberattack on a partner firm that provides in-flight meals and onboard services, industry sources reported on Monday.
According to the sources, Korean Air issued an internal notice earlier in the day informing employees that KC&D, the airline’s catering and onboard sales supplier, had recently suffered a cyberattack by a hacker group.
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
It was the latest incident in a series of recent data breaches affecting major companies, including Coupang Inc., KT Corp. and Shinhan Card Co.
The airline reported that the breach exposed the personal data of Korean Air employees, including names and phone numbers, stored on KC&D’s servers.
Korean Air learned of the incident from KC&D and has implemented emergency security measures while informing the authorities.
Employees are advised to stay alert for possible secondary damage and to be cautious of suspicious texts or emails.
While Korean Air has yet to attribute the attack, the Clop ransomware gang has claimed responsibility for the KC&D attack in November and later published the allegedly stolen data on its dark web leak site, making it available for download via Torrent.
