By Eduard Kovacs
Publication Date: 2025-12-30 08:50:00
South Korean airline Korean Air has disclosed a data breach that exposed 30,000 employee details following a cyber attack on its former subsidiary and current catering provider Korean Air Catering & Duty-Free (KC&D).
KC&D was originally a division of the airline, but was spun off and sold to a private equity firm in 2020. In addition to Korean Air, KC&D serves many other major airlines from Asia and other parts of the world.
Accordingly Korea JoongAng DailyKC&D recently informed Korean Air that information belonging to the airline’s employees had been compromised.
Korean Air has reportedly confirmed that hackers stole the information of around 30,000 of its current and former KC&D employees, including names and bank account numbers. The airline said customer data was not disclosed.
The disclosed incident is likely related to the most recent one Oracle E-Business Suite (EBS) campaignin which cybercriminals exploited EBS’s zero-day vulnerabilities to gain access…
