Data breachcritical

Korean Air discloses data breach after the hack of its catering and duty

Security Affairsby @securityaffairsDec 29, 2025 · 23:03 UTC (Dec 29, 2025)3 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-61882 CVE-2023-0669 CVE-2023-34362

Tags: cve-2025-61882 cve-2023-0669 cve-2023-34362 breach

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-0669	Pre-Authentication Deserialization RCE in Fortra GoAnywhere MFT	7.2	100%	KEVRansomwarePoC ×3	Feb 6, 2023 KEV Feb 10, 2023
CVE-2023-34362	Unauthenticated SQL Injection in Progress MOVEit Transfer	9.8	100%	KEVRansomwarePoC	Jun 2, 2023 KEV Jun 2, 2023
CVE-2025-61882	Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing	9.8	100%	KEVRansomware	Oct 5, 2025 KEV Oct 6, 2025

From the original article

3 min read at securityaffairs.com

Korean Air employee discloses a data breach after a hack of its catering and duty-free supplier, KC&D, affecting thousands of staff. Korean Air suffered a data breach after its in-flight catering supplier Korean Air Catering & Duty-Free (KC&D) was hacked, exposing personal data of ~30,000 employees of Korean Air employees.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.