Korean Air Catering & Duty-Free

Korean Air Catering & Duty‑Free (KC&D) provided airline catering and duty‑free retail services. As a former subsidiary of Korean Air, its primary market was the airline’s flight operations, supplying meals and onboard retail products to passengers. The company was headquartered in South Korea, reflecting its close ties to the national carrier. Its operations were integrated into Korean Air’s supply chain, supporting both domestic and international routes. KC&D’s service portfolio included food preparation, beverage provision, and the management of duty‑free shops aboard aircraft. The organisation served the aviation hospitality sector, focusing on the needs of Korean Air’s customers.

KC&D distinguished itself by handling employee payroll and financial data through an Oracle E‑Business Suite system, which became the point of entry in a cyber incident disclosed on 2025‑11‑21. In that breach, attackers accessed the personal information of roughly 30,000 current and former employees, exposing names and bank account numbers while leaving customer data untouched. After the company refused to meet a ransom demand, the catering firm was named on a ransomware group’s leak site. The incident was described as part of a wider campaign affecting multiple organisations across various sectors. Structurally, KC&D operated as a subsidiary of Korean Air before being separated or divested, though the exact timing of that change is not detailed in the source. The breach underscored the risks associated with legacy enterprise resource planning platforms in the aviation support sector.