Jin Air said in a website notice on Oct. 29 that an external attack exposed the personal data of 1,454 members. Names, mobile numbers, emails and birth dates are involved, and so is nationality.
Attack confirmed on the 28th, notice on the 29th
Jin Air says it confirmed abnormal outside access to its member-information lookup API on Oct. 28 and blocked the attacking IPs. The notice went up on Oct. 29. So far 1,454 members are confirmed affected; the investigation is ongoing, so the number could change.
The eight items that got out
User ID, name, date of birth, gender, nationality, mobile number, email address and the date and time of the latest login. Members registered with a foreign nationality are covered by the same fields.
What the company says stayed safe
Passwords, financial information and payment history were not leaked, and no misuse or secondary damage has been confirmed.
Jin Air cut off and deleted the system used as the attack route, reported to the relevant authorities and runs 24-hour emergency monitoring.
If an email arrives, do not click the link
Affected members get an individual email. Jin Air warns of phishing messages posing as booking confirmations or refund notices: do not click unknown links, open unexpected attachments or enter personal data when asked.
Kyunghyang's headline frames it as following Korean Air and Asiana Airlines.
