The passport numbers and mobile phone numbers of customers whose business travel was handled by a travel agency on behalf of Hyundai Motor and Kia were leaked through Amadeus, the operator of a global airline reservation system.
According to industry sources on the 16th, Hyundai Dream Tour recently sent individual email notifications to affected customers. The leaked data included English names, passport numbers, mileage account numbers, emails for reservations and airlines, and mobile phone numbers. The breach is estimated to have occurred between August 10, 2023, and September 23 of this year. Reporters who participated in Kia events also received notifications.
Hyundai Dream Tour is a business travel specialist agency under the Hyundai Department Store Group. The company books and issues airline tickets using the system of Topas Travel Information (Topas), which utilizes Amadeus's reservation technology. Amadeus explained that unauthorized access to some reservation inquiry data occurred due to vulnerabilities in the reservation inquiry environment, including unauthorized access using login authentication information from system accounts.
Hyundai Dream Tour urged customers not to respond to communications impersonating airlines or travel agencies that request payment or authentication codes. The company has changed the password for its Topas system access account and is demanding an explanation of the breach and measures to prevent recurrence from Amadeus and Topas.
in INDUSTRY
