Korean Air Catering & Duty-Free

Profile narrative

Korean Air Catering & Duty‑Free, also known as KC&D, is a South Korean company headquartered in South Korea that provides catering and duty‑free services. The firm originated as a subsidiary of Korean Air and continues to operate as the airline’s current catering supplier. Its core business involves preparing and delivering meals and beverages for flights, as well as managing duty‑free retail offerings for passengers. KC&D serves the aviation sector, focusing on the needs of airlines that require reliable food service and onboard retail solutions. The company’s operations are rooted in the airline industry, leveraging its historical ties to Korean Air to maintain service standards. By specializing in both catering and duty‑free retail, KC&D addresses two complementary aspects of the passenger experience.

KC&D’s distinguishing attributes include its dual focus on flight catering and airport duty‑free commerce, a combination that is not common among pure catering providers. This specialization enables the company to coordinate food logistics with retail inventory management for airline clients. While no explicit figures on workforce size or annual revenue are provided in the source material, a November 2025 disclosure revealed that a cyberattack compromised roughly 30 000 employee records containing names and bank account numbers. The breach did not affect customer data, and the incident was linked to a widespread Oracle E‑Business Suite zero‑day exploit campaign associated with the FIN11 threat group, with the Cl0p ransomware group claiming responsibility and publishing about 500 GB of stolen data. The attack highlighted KC&D’s exposure to supply‑chain cyber risks that also impacted other organizations such as Envoy Air, whereas a separate incident involving Asiana Airlines was deemed unrelated. Structurally, KC&D is no longer a subsidiary of Korean Air but remains an independent supplier that continues to cater to the airline’s operational needs. These facts constitute the publicly available information about the organization’s role, scale, and recent cybersecurity event.

Incidents

1 incident linked to this organisation.