2026-10-30
Unauthorized Access at the Passenger Service System Vendor of JAL, JTA and ANA (About 92,000 JAL/JTA Customers): Booking Numbers, Names and More Viewed, and What Travellers Should Do
Japan Airlines (JAL) and Japan Transocean Air (JTA) announced on October 28, 2026 that on October 23 they were told by the vendor of their passenger service system, an overseas company, that unauthorized access to the vendor's systems left traces of some booking information being viewed from outside. According to the two airlines, the period is August 10, 2023 to September 23, 2026, and the records are some bookings on JAL and JTA flights. About 90,000 people had booking number, name, boarding date, route and cabin class involved; about 2,000 people also had email address, phone number, passport number, nationality, mileage number, airline, flight number, ticket number, seat number and more also viewed. The total is about 92,000 people. The airlines say no credit card numbers or passwords leaked, flights were not affected, and no misuse has been confirmed. All Nippon Airways (ANA) announced on October 29 unauthorized access to the passenger service system of the same vendor and indicated that there are traces of some customers' personal information having been viewed; it has not published the items or numbers and says it is confirming the scope with the vendor. This site's conclusion: even if a message claiming to be from an airline gets your booking number, name and flight right, do not use its links or numbers; check in the official app or site. If your passport or mileage number may be involved, change your mileage account password and review its redemption history.