Several travel companies in Japan have reported potential data breaches, raising concerns about the security of customers’ personal information amid recent cyberattacks.
Affected Companies
-
Adventure (Skyticket)
- Customer Impact: Up to 14.64 million records at risk, including 4.13 million login passwords.
- Unauthorized Access Dates: October 2–4 (internal servers and cloud), with earlier intrusions affecting bus reservation and business management systems from August to October.
- Compromised Data: Names, dates of birth, addresses, phone numbers, and email addresses; no passport or credit card information leaked.
- Company Response: Blocked unauthorized access, suspended payments with saved credit cards, and warned customers about potential phishing attempts.
-
H.I.S.
- Customer Impact: Passport information of up to 627 people may have been leaked from its Thailand-based subsidiary.
- Incident Date: December of last year, with a delayed announcement due to the complexity of the investigation.
- Compromised Data: Customers’ passport numbers and dates of birth.
- Company Response: Implemented safety measures post-incident.
-
Temairazu
- Incident Date: September 21, unauthorized access reported on September 28.
- Potential Customer Impact: Customers may have received fraudulent text messages asking for banking details.
- Company Response: Blocked unauthorized access and restored service.
The companies are investigating and have committed to enhancing their security measures to prevent future incidents.
