Threat Intelligence · Privacy
Japan Airlines data breach exposes personal details of 92,000 customers
Japan Airlines says hackers accessed reservation data for 92,000 customers, including passport and contact details for 2,000. The breach is part of a wider wave of cyberattacks in Japan.
Ross Grant2 min read
The short version
Hackers broke into a system used by Japan Airlines and stole personal details of 92,000 customers. For 2,000 people, the stolen data included passport numbers and contact details. The airline says it will warn affected customers and that no credit card data was taken. This is one of several recent cyberattacks on Japanese companies.
By the numbers
- 92,000Japan Airlines customers affectedRecorded Future News
- 2,000customers had passport numbers and contact details stolenRecorded Future News
- 2.5 millionpeople affected in recent Sony Network Communications breachRecorded Future News
- 11 millionBurger King Japan customers affected by recent breachRecorded Future News
- 11.7 millionCapcom customers affected by recent breachRecorded Future News
What happened?
Japan Airlines says hackers accessed reservation data for 92,000 customers, including passport numbers and contact details for 2,000. The breach happened through Amadeus, its IT provider. The company says credit card data was not affected. Only one outlet has reported this so far.
Who is affected
Japan Airlines reported that hackers accessed reservation data for 92,000 customers. This includes people who booked flights with Japan Airlines and Japan Transocean Air. For about 2,000 of these customers, more sensitive information was stolen, such as passport numbers, frequent flyer numbers, email addresses and phone numbers. The company said that credit card numbers were not affected, and flight operations were not disrupted.
What was taken
According to Japan Airlines' statement (opens in a new tab), the attackers accessed names, reservation codes and flight information for all 92,000 affected customers. For a smaller group of around 2,000, the breach included passport numbers, frequent flyer numbers, email addresses and phone numbers. This kind of information could be used for identity theft or targeted phishing attacks.
How the attack worked
The breach happened through Amadeus IT Group, the company that manages Japan Airlines' flight reservation, ticketing and check-in systems. Amadeus informed Japan Airlines last week that hackers had accessed a portion of customer reservation data. The exact method the attackers used to get in has not been reported.
The response
Japan Airlines said it will contact affected customers directly to offer help and warn them to watch out for phishing emails, fraudulent phone calls and fake websites pretending to be from the airline. The company has also made a public notice about the breach. The Japanese government has responded to this and other recent incidents by promising new emergency measures to protect citizens and businesses from cyberattacks. Prime Minister Sanae Takaichi described the situation as serious and called for urgent action. The Japanese Defence Minister has discussed these attacks with the US Defence Secretary, agreeing to strengthen cooperation against cyber threats.
Has this happened before?
This breach is part of a recent wave of cyberattacks on Japanese companies. In the last two weeks, an internet provider owned by Sony Network Communications reported a breach affecting 2.5 million people. Burger King Japan and gaming company Capcom each had data stolen from over 11 million customers. A major online financial services company also suffered a cyberattack leading to customer financial losses. The government has responded with high-level meetings and promises of new security measures.
Why it matters
Personal details like passport numbers and contact information can be used for identity theft or phishing scams. The breach highlights the risks of sharing sensitive data with third-party IT providers. It is part of a wider trend of cyberattacks on major Japanese companies.
Key points
- Hackers accessed data for 92,000 Japan Airlines customers.
- Sensitive data like passport numbers and contact details was stolen for 2,000 people.
- The breach happened through a third-party IT provider.
- Japan Airlines is warning affected customers and offering support.
- This is part of a recent surge in cyberattacks on Japanese companies.
Sources
Recorded Future News
Reference
