Select
Korea
Japan
China
Hong Kong, China
Vietnam
Singapore
Indonesia
Philippines
Thailand
Cambodia
United States
Australia
Germany
France
United Kingdom
Italy
Türkiye
Spain
Czech Republic
Hungary
Mongolia
Uzbekistan
Kazakhstan
Notice of Personal Data Breach
Asiana Airlines hereby provides notice regarding a potential personal data security incident detected within the system operated by our service provider.
Circumstances indicating a personal data breach have been identified within the system of Amadeus IT Group, S.A. ("Amadeus"), a global airline reservation system operator used by Asiana Airlines for passenger reservation and ticketing services. It was determined that unauthorized access occurred using credentials assigned to Amadeus's system accounts, estimated to have taken place between August 2023 and September 2026.
Asiana Airlines was officially notified by Amadeus on October 20, 2026, at 10:49 PM KST. We immediately implemented initial security measures and confirmed no evidence of infringement on Asiana Airlines’s internal databases. Additionally, we filed a formal report with the relevant South Korean government authorities.
It has been confirmed that some customers’ Booking Reference Numbers (PNR) are included among the affected data set. Verification regarding other potential breach items is currently underway through Amadeus, and updates will be provided promptly as details are confirmed. In addition, individual notifications have been sent via email to the affected customers identified so far.
Amadeus has reported that remediation measures, including blocking unauthorized access and initiating dark web monitoring, are underway. Furthermore, Asiana Airlines is working closely with Amadeus to enforce strengthened security measures and comprehensive prevention strategies beyond these initial actions.
No secondary damage has been reported to date. As a precaution, please refrain from clicking unfamiliar links, downloading unknown attachments, or responding to requests for personal information.
Customers affected by this incident may seek remedies, such as applying for dispute mediation or claiming compensation for damages, under applicable data protection laws, including Articles 39, 39-2, and 43 of the Personal Information Protection Act (Personal Information Dispute Mediation Committee: +82-1833-6972).
For inquiries or assistance, please contact the Passenger Business Division (Service Center, Privacy-help@flyasiana.com).
Although this incident occurred within Amadeus's domain, Asiana Airlines takes this matter seriously and is committed to preventing recurrence.
We regret any concern this may cause.
Asiana Airlines Co., Ltd.