Korean Air

Profile narrative

Korean Air, also known as Korean Air Lines or KAL, is a South Korean carrier headquartered in South Korea. As an airline, its core activity is air transportation. The organisation is identified in the provided context as a carrier, placing it in the commercial aviation sector. The available material does not specify its route network, fleet size, passenger volumes, cargo operations, or market share, so those details are not stated here. Its public identity is tied to the Korean Air, Korean Air Lines, and KAL aliases, which refer to the same organisation.

A relevant recent cybersecurity event was disclosed on 21 November 2025. Korean Air reported that a cyberattack affected a former subsidiary and catering supplier. The incident exposed personal information of about thirty thousand current and former employees. The exposed information included names and bank account numbers. Korean Air stated that customer data was not affected by this breach. The intrusion was attributed in the disclosure to exploitation of Oracle E-Business Suite zero-day vulnerabilities. The campaign was linked to the Cl0p ransomware group. Cl0p posted the subsidiary’s data on its leak site and released roughly five hundred gigabytes of stolen files. The incident formed part of a broader series of intrusions affecting multiple organizations across sectors. A separate employee-data leak reported by another South Korean carrier was not connected to this campaign. Structurally, the disclosed event involved a former subsidiary and catering supplier, and the provided overview does not identify a broader parent-company relationship beyond that connection.

Incidents

1 incident linked to this organisation.