Japan Airlines
Tokyo, Japan4 sources
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 28 Oct 2026.
Japan Airlines suffers third-party data breach exposing passenger info
Hackers accessed booking data via Amadeus's Passenger Service System, exposing the data of about 92,000 Japan Airlines customers. For approximately 2,000 customers, additional sensitive data such as passport numbers and frequent flyer numbers were also leaked.
- Type
- Data breach
- Sector
- Transport
- Records
- 92K records confirmed
- First reported
- 28 Oct 2026
- Latest source
- 29 Oct 2026
What to do
- If you have an account, change that password, and anywhere you reused it.
- Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
- Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
- If payment cards were involved, watch statements and ask your bank for a new card.
- If government ID or social security numbers were involved, consider a credit freeze.
- If this is a vendor of yours, ask what of your data they held and whether it was in scope.
- Reset any API keys, SSO trusts or shared credentials you have with them.
- Brief your help desk: attackers often impersonate the breached brand next.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for Japan Airlines
Sources
4- bleepingcomputer.com29 Oct 2026bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info
- getleaktrace.com29 Oct 2026getleaktrace.com/breaches/i/386644/japan-airlines
- sumikai.com29 Oct 2026sumikai.com/nachrichten-aus-japan/hacker-greifen-auf-buchungsdaten-von-japan-airlines-zu-382212