Breach · · 3 min read
Jin Air: details of 1,454 members taken through a member lookup system
Korean low-cost airline Jin Air says attackers abused a system used to look up member information and took names, contact details and birth dates of 1,454 members.
Jin Air, a South Korean low-cost airline in the Hanjin group, says attackers took the details of 1,454 of its members by abusing one of its internal systems. Passwords and payment details weren’t included. If you have a Jin Air account, here’s what is known and what to watch for.
What happened
In a notice on its website on October 29, 2026, Jin Air said it had found signs of abnormal outside access to its internal systems. The attack targeted an application programming interface (API), a connection systems use to pass data to each other, that was used to look up member information. Jin Air says it confirmed the attack on October 28 and blocked the attackers’ IP addresses, according to the Seoul Economic Daily.
The exposed details are member ID, name, date of birth, gender, nationality, mobile phone number, email address and the date and time of the most recent sign-in. Jin Air says passwords, financial information and payment records weren’t leaked, and that it hasn’t found any misuse so far, Chosun Biz reported.
Jin Air reported the breach to Korea’s Personal Information Protection Commission, cut off and deleted the system used in the attack, and says it’s running round-the-clock monitoring while it rechecks its security. It plans to email affected members individually, according to the security outlet Dailysecu. The airline hasn’t said when the attack started, how long it lasted or which weakness was used.
This is separate from the Amadeus booking system breach that affected Korean Air and Asiana, Jin Air’s sister airlines. Jin Air says this attack was on its own system.
What this means for you
A name, phone number, email address and birth date together are enough to make a fake message look personal. Expect scams that pretend to be about a booking, a refund or a flight change.
What you can do
- Watch for Jin Air’s email. If you’re affected, Jin Air says it will tell you by email. Check it by signing in to Jin Air’s site or app yourself, not through a link.
- Treat booking and refund messages with care. Jin Air asks people not to open links or attachments from unknown senders and not to enter personal details when asked.
- Change your Jin Air password if you reuse it. Passwords weren’t leaked, but if you use the same one anywhere else, now is a good moment to give each account its own.
- Don’t share your birth date to “verify” yourself with someone who called or messaged you first.
How Frame helps
Frame keeps a catalog of known breaches. Add the ones you know you were part of to a verified email and Frame shows what each exposed, gives you a short checklist and counts it in your exposure report. Automatic breach lookups aren’t live yet. Frame’s email aliases also let you give each airline its own address, so a scam sent to the wrong address is easy to spot. Frame never collects or stores the leaked records themselves.
Sources
- Seoul Economic Daily, Jin Air Says Data of 1,454 Members Leaked in External Attack, October 29, 2026
- Chosun Biz, Jin Air confirms hack leaks data of 1,454 members in South Korea, October 29, 2026
- Dailysecu, 진에어, 회원정보 조회 API 공격으로 1,454명 개인정보 유출 (in Korean), October 29, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.