Japan Airlines warns of data breach as country grapples with multiple cyber incidents

Japan Airlines said one of its IT providers suffered a data breach that leaked the personal records of more than 90,000 customers, adding to a series of cyberattacks on Japanese firms that has prompted government action in recent days. 

The company published a notice on Wednesday saying Amadeus IT Group, the company that runs its flight reservation, ticketing and check-in systems, informed the firm last week that hackers accessed a “portion of customer reservation data” for Japan Airlines and Japan Transocean Air flights. In total, 92,000 customers were impacted, with hackers accessing names, reservation codes and flight information. 

For about 2,000 Japan Airlines customers, the hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers. 

Japan Airlines said the breach never impacted flight operations and credit card numbers were not compromised. 

“We will contact the affected customers individually to provide necessary assistance, including reminders to remain vigilant against phishing emails, fraudulent phone calls, and suspicious websites impersonating the JAL Group,” the company said. 

The data breach follows multiple high-profile data breaches impacting Japanese companies over the last two weeks. On Tuesday, an internet service provider owned by Sony Network Communications said more than 2.5 million people had information stolen during a data breach earlier this month. 

Eleven million people had data stolen in a cyberattack on Burger King Japan and another 11.7 million were affected by a breach involving gaming company Capcom.

A large Japanese online financial services company offered to compensate customers after a recent cyberattack on its foreign exchange trading service led to customer financial losses. 

Prime Minister Sanae Takaichi held a cabinet meeting on Monday centered on the cyberattacks, vowing to release a package of emergency measures to better protect Japanese companies and citizens from cyberattacks. 

“The situation is serious, with growing concerns about civil damages resulting from the misuse of leaked information. We must urgently strengthen our countermeasures,” Takaichi told reporters following the meeting, according to the Japan Times. 

The news outlet reported that Japanese Defense Minister Shinjiro Koizumi met with U.S. Defense Secretary Pete Hegseth on Wednesday in the Philippines and also discussed the recent cyberattacks. 

​​“Against the backdrop of a series of malicious cyberactivities — including large-scale leaks of personal information — both domestically and internationally, the two defense chiefs agreed to continue strengthening cooperation and coordination to prevent such activities from having a serious impact on the lives of citizens, economic activities, and, ultimately, the security of both nations,” the Japanese Defense Ministry said in a readout.