Asiana Airlines was found to be storing roughly 47,000 documents containing scanned passports, bank account information, home addresses, and other sensitive customer details on its website.
Victims include those who have traveled or plan to travel on Korea's second-largest airline or one of its affiliate partners, such as United, Air Canada, Air China, Lufthansa, and Thai Airways.
The breach was first reported by The Korea Times, which was able to easily access a number of scanned documents right on its website, to include a flight ticket invoice from Sep. 2014. The Times reported the airline had shut down its Frequently Asked Questions section after it was notified of the compromise.
The airline said it was investigating in a statement posted to its website, but said the breach was limited only to customers who uploaded or attached documents when using the "Contact Us" feature on its website.
"According to our internal report, we ascertained the possibility of exposed documents on our website's 'Contact Us' section," the airline wrote.
"Asiana Airlines is still investigating this potential breach and will continue to monitor its security system to determine which, if any, customers’ personal information was compromised. Once the investigation is complete, Asiana Airlines will immediately contact customers whose personal information has been compromised."
Join the conversation about this story »
NOW WATCH: You can modify your iPhone's logo so it glows like the one on your MacBook