Bleepingcomputer Japan Airlines Data Breach Exposes 92,000 Customer Records
Article Content
- •92,000 customers' data exposed due to a breach at Amadeus.
- •Sensitive information for 2,000 customers includes passport numbers and frequent flyer details.
- •No credit card information or passwords were compromised.
Japan Airlines (JAL) reported a data breach at Amadeus’s Passenger Service System, affecting 92,000 customers. The breach, which occurred between August 10, 2023, and September 23, 2026, exposed reservation codes, names, and flight details. For approximately 2,000 customers, sensitive information such as email addresses, phone numbers, passport numbers, and frequent flyer numbers was also compromised. JAL confirmed that credit card numbers and passwords were not affected and stated there is no evidence of misuse of the data. Amadeus, the IT firm responsible for the system, had previously announced a vulnerability in its travel booking display environment on October 1, 2026. Other airlines, including All Nippon Airways, Asiana Airlines, and Korean Air, are also reported to be affected by this incident. JAL is reaching out to affected customers to provide support and guidance. The airline assured that flight operations remain unaffected.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track All Nippon Airways in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What specific data was compromised?
How is JAL responding to the breach?
Is there evidence of data misuse?
Continue Reading
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25… 
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…