INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Japan Airlines Warns of Data Breach Amid Country's Cyber Incidents

| 2026-10-28 20:33 CRITICAL LOW DATA BREACH CRITICAL INFRASTRUCTURE & OT
JSON
Executive Summary
AI-generated
Japan Airlines experienced a data breach on October 28, 2026, where hackers accessed the personal records of more than 90,000 customers. The breach was caused by Amadeus IT Group, which runs Japan Airlines' flight reservation and ticketing systems. For approximately 2,000 Japan Airlines customers, hackers stole passport numbers, frequent flyer numbers, email addresses, phone numbers, names, reservation codes, and flight information. This incident is part of a series of cyberattacks on Japanese firms that prompted government action in recent days, with over 92,000 customers impacted by the breach. The attack likely works by exploiting vulnerabilities in Amadeus IT Group's systems to gain unauthorized access to customer data. As of now, Japan Airlines has notified affected customers and is providing assistance, while the government continues to strengthen countermeasures against cyberattacks.
Technical Mitigations AI-generated
• Audit (ATT&CK mitigation for Phishing): Perform audits or scans of systems, permissions, insecure software, insecure configurations, etc. • Network Intrusion Prevention (ATT&CK mitigation for Phishing): Network intrusion prevention systems and systems designed to scan and remove malicious email attachments or links can be used to block activity. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
ASEAN ASEAN aviationaviation mediamedia
Incident Timeline
‎2026/10/21
Threat actors accessed a "portion of customer reservation data" for Japan Airlines and Japan Transocean Air flights via Amadeus IT Group's systems.
target_region Japan
The company published a notice on Wednesday saying Amadeus IT Group, the company that runs its flight reservation, ticketing and check-in systems, informed the firm last week that hackers accessed a “portion of customer reservation data” for Japan Airlines and Japan Transocean Air flights.
organisation Amadeus IT Group
The company published a notice on Wednesday saying Amadeus IT Group, the company that runs its flight reservation, ticketing and check-in systems, informed the firm last week that hackers accessed a “portion of customer reservation data” for Japan Airlines and Japan Transocean Air flights.
organisation Japan Transocean Air
The company published a notice on Wednesday saying Amadeus IT Group, the company that runs its flight reservation, ticketing and check-in systems, informed the firm last week that hackers accessed a “portion of customer reservation data” for Japan Airlines and Japan Transocean Air flights.
‎2026/10/28
Japan Airlines disclosed a data breach affecting approximately 2,000 customers, with hackers stealing passport numbers, frequent flyer numbers, email addresses and phone numbers.
organisation Japan Airlines
Japan Airlines warns of data breach as country grapples with multiple cyber incidents.
victims 90,000 customers
Japan Airlines said one of its IT providers suffered a data breach that leaked the personal records of more than 90,000 customers, adding to a series of cyberattacks on Japanese firms that has prompted government action in recent days.
victims 2,000 Airlines customers
For about 2,000 Japan Airlines customers, the hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers.
organisation Burger King Japan
Eleven million people had data stolen in a cyberattack on Burger King Japan and another 11.7 million were affected by a breach involving gaming company Capcom.
organisation Capcom
Eleven million people had data stolen in a cyberattack on Burger King Japan and another 11.7 million were affected by a breach involving gaming company Capcom.
data_breach 11.7 data
Eleven million people had data stolen in a cyberattack on Burger King Japan and another 11.7 million were affected by a breach involving gaming company Capcom.
organisation Sony Network Communications
On Tuesday, an internet service provider owned by Sony Network Communications said more than 2.5 million people had information stolen during a data breach earlier this month.
organisation the JAL Group
“We will contact the affected customers individually to provide necessary assistance, including reminders to remain vigilant against phishing emails, fraudulent phone calls, and suspicious websites impersonating the JAL Group,” the company said.
organisation the Japanese Defense Ministry
…cyberactivities — including large-scale leaks of personal information — both domestically and internationally, the two defense chiefs agreed to continue strengthening cooperation and coordination to prevent such activities from having a serious impact on the lives of citizens, economic activities, and, ultimately, the security of both nations,” the Japanese Defense Ministry said in a readout.
organisation Breaking News
is a Breaking News Reporter at Recorded Future News.
organisation Recorded Future News
is a Breaking News Reporter at Recorded Future News.
organisation ZDNet
He previously covered cybersecurity at ZDNet and TechRepublic.
organisation TechRepublic
He previously covered cybersecurity at ZDNet and TechRepublic.
victims 92,000 customers
In total, 92,000 customers were impacted, with hackers accessing names, reservation codes and flight information.
Tactical Metrics
Metrics
victims
90,000
Customers
Japan Airlines said one of its IT providers suffered a data breach that leaked the personal records of more than 90,000 customers, adding to a series of cyberattacks on Japanese firms that has prompted government action in recent days.
Metrics
victims
2,000
Airlines Customers
For about 2,000 Japan Airlines customers, the hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers.
Metrics
data_breach
11,700,000
Data
Eleven million people had data stolen in a cyberattack on Burger King Japan and another 11.7 million were affected by a breach involving gaming company Capcom.
Metrics
victims
92,000
Customers
In total, 92,000 customers were impacted, with hackers accessing names, reservation codes and flight information.
Intelligence Sources
TheRecord 2026-10-28