gcdRadar
closedclosed 12 Nov 2026Breaches & attacks3 Confirmed exploitation

Japan Airlines suffers data breach exposing customer passport and contact data

Japan Airlines booking system

Hackers compromised Japan Airlines systems and stole personal data, including passport numbers and email addresses, belonging to about 2,000 customers. The incident highlights rising cyber threats targeting Japanese transportation infrastructure.

why this severityConfirmed breach involving unauthorized access and data theft.

first report
28 Oct 2026
last update
29 Oct 2026

What to do

Investigate affected systems and notify impacted customers.

Timeline · 2

  1. 28 Oct 2026Japan Airlines warns of data breach as country grapples with multiple cyber incidents
  2. 29 Oct 2026Third-party breach at a passenger service system exposes data of 92,000 customers

Sources · 2

News and write-ups

  1. 2026-10-28
    Japan Airlines warns of data breach as country grapples with multiple cyber incidents
    The Record · therecord.media/japan-airlines-warns-of-breach-country-grapples-with-incidents
  2. 2026-10-29
    Japan Airlines suffers third-party data breach exposing passenger info
    BleepingComputer · bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breac

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
3 · Confirmed exploitation
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 28 Oct 2026 · first reported 28 Oct 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-10-29 00:20Z · updated 2026-11-13 00:11Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Japan Airlines suffers data breach exposing customer passport and contact data

https://gcdradar.vercel.app/incidents/japan-airlines-suffers-data-breach-exposing-customer-passpor · AIR-2026-1627 · closed 2026-11-12

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed breach involving unauthorized access and data theft.
- Fix status: No fix needed
- First reported: 2026-10-28
- AI role: No AI role
- Products: Japan Airlines booking system

## Summary

Hackers compromised Japan Airlines systems and stole personal data, including passport numbers and email addresses, belonging to about 2,000 customers. The incident highlights rising cyber threats targeting Japanese transportation infrastructure.

## What to do

Investigate affected systems and notify impacted customers.

## Latest updates

- 2026-10-29: Third-party breach at a passenger service system exposes data of 92,000 customers (https://bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info)
- 2026-10-28: Japan Airlines warns of data breach as country grapples with multiple cyber incidents (https://therecord.media/japan-airlines-warns-of-breach-country-grapples-with-incidents)

## Sources

- 2026-10-28 The Record: Japan Airlines warns of data breach as country grapples with multiple cyber incidents https://therecord.media/japan-airlines-warns-of-breach-country-grapples-with-incidents
- 2026-10-29 BleepingComputer: Japan Airlines suffers third-party data breach exposing passenger info https://bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
  2. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713

  3. live
  4. live
    University of Texas at Arlington discloses data breach from cyberattack

    Breaches & attacks · Exploited · since 13 Nov 2026

  5. live
  6. live