H.I.S. Co., a major Japanese travel agency, reported that passport information for approximately 627 customers may have been compromised due to unauthorized access to a server at its Thai subsidiary, H.I.S. Tours Co. The breach was detected on December 11, 2025, prompting the company to disconnect the server and restrict access.
Upon investigation, it was found that personal information—including names, genders, birth dates, passport numbers, expiration dates, and allergy information—was leaked for customers who traveled to Thailand in 2017, between 2019 and 2020, and between 2024 and 2025. Importantly, the breach did not involve phone numbers, addresses, email addresses, or credit card details. H.I.S. plans to reach out to affected customers when possible.
