Governance Breakdown: How Korean Air Lost 30,000 Employee Records Through a Divested Subsidiary
Korean Air divested KC&D Service in 2020. The data didn't leave with it. Cl0p ransomware exploited an unpatched Oracle ERP five years later — 500GB on a dark web leak site. Six TAIMScore™ controls failed simultaneously across three domains. A forensic record, not a warning.