Security News

Japan Airlines Customer Data Exposed After Breach at Its Reservation Provider

The Record · 29 Oct 2026
Key Takeaway Your business data is only as safe as your suppliers' systems, so ask your IT and software providers how they protect your customer information and have a plan to warn customers about phishing if a supplier is breached.

Japan Airlines has warned that one of its IT providers suffered a data breach affecting about 92,000 customers. The airline said Amadeus IT Group, which runs its flight reservation, ticketing and check-in systems, told it last week that hackers accessed a portion of customer reservation data for Japan Airlines and Japan Transocean Air flights. The exposed information included names, reservation codes and flight details. For about 2,000 Japan Airlines customers, passport numbers, frequent flyer numbers, email addresses and phone numbers were also stolen.

The airline said flight operations were not affected and credit card numbers were not compromised. It will contact affected customers individually and has urged them to stay alert for phishing emails, fraudulent phone calls and fake websites impersonating the JAL Group.

The incident follows several other high-profile breaches in Japan over the past two weeks. An internet service provider owned by Sony Network Communications reported that more than 2.5 million people had information stolen. Burger King Japan and gaming company Capcom were also hit, affecting 11 million and 11.7 million people respectively. Prime Minister Sanae Takaichi held a cabinet meeting on the attacks and promised a package of emergency measures, saying the situation is serious and countermeasures must be strengthened urgently.

Answering to more than one framework? Run them as one security and AI governance programme ->

Summarised by CISO AI from The Record, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.