Adventureskyticket

5CriticalPartly confirmedAnnounced Updated

About 14.64 million customer records leaked, plus card data of up to 6,140 people from old premium fee logs. Bus reservation and benefit-service data were also affected. The first report denying card leaks was corrected.

This incident was imported from a dataset that compiles public announcements, and we are still checking it against the sources. Counts and causes will be updated after the check. Sources are in Japanese.

Cause
Unauthorized access
Occurred
2026-08-03 – 2026-10-04
Sector
Food, travel & leisure
Operational impact
Some services stopped

Data involved

DataStatusCountGroupEvidence
Email addressLeak confirmedNot disclosed顧客情報サーバーSource(opens in a new tab)
PasswordLeak confirmedabout 4,130,000 records顧客情報サーバーSource(opens in a new tab)
Payment detailsLeak confirmedup to 6,140 people顧客情報サーバーSource(opens in a new tab)
NameLeak confirmedNot disclosed顧客情報サーバーSource(opens in a new tab)
Postal addressLeak confirmedNot disclosed顧客情報サーバーSource(opens in a new tab)
Phone numberLeak confirmedNot disclosed顧客情報サーバーSource(opens in a new tab)
Date of birthLeak confirmedNot disclosed顧客情報サーバーSource(opens in a new tab)
Email addressLeak confirmed68 records業務管理システムSource(opens in a new tab)
Payment detailsLeak confirmed17,780 records業務管理システムSource(opens in a new tab)
NameLeak confirmedNot disclosed業務管理システムSource(opens in a new tab)
Phone numberLeak confirmedNot disclosed業務管理システムSource(opens in a new tab)
Date of birthLeak confirmed68 records業務管理システムSource(opens in a new tab)
Postal addressLeak confirmed18 records業務管理システムSource(opens in a new tab)
Email addressLeak confirmedNot disclosedバス予約Source(opens in a new tab)
User or member IDLeak confirmedNot disclosedバス予約Source(opens in a new tab)
Payment detailsLeak confirmedNot disclosedバス予約Source(opens in a new tab)
NameLeak confirmedNot disclosedバス予約Source(opens in a new tab)
Phone numberLeak confirmedNot disclosedバス予約Source(opens in a new tab)
Date of birthLeak confirmedNot disclosedバス予約Source(opens in a new tab)
User or member IDLeak confirmedNot disclosedプレミアム特典サービスSource(opens in a new tab)
NameLeak confirmedNot disclosedプレミアム特典サービスSource(opens in a new tab)
PasswordLeak confirmedNot disclosedプレミアム特典サービスSource(opens in a new tab)

Counts are the figures the organization announced. Because the same person may be counted more than once, we do not add the rows together.

What users should do

  • Change your password
  • Change the password on other services where you reused it
  • Check your card statements
  • Watch for emails and texts pretending to be the company

General steps based on the type of data involved. Check the organization’s notice or help line to see whether you are affected.

Tools for this kind of attack

Picked from the cause of the incident: tools that help you check your own systems for the same kind of weakness, or spot the warning signs.

Vuls

Impact Reaches others
future-architect/vuls

An agentless vulnerability scanner that checks the packages installed on a server and lists the ones affected by known CVEs.

Purpose
Defense
Type
Command line
Difficulty
Intermediate
License
CopyleftGPL-3.0
Category
Vulnerability scanning
Actively updatedstars12,302Last update 2026-10-21
Read the Vuls review

Wazuh

Impact Local only
wazuh/wazuh

A free security platform (SIEM/XDR) that collects logs, configuration, and vulnerability data from agents on your endpoints and shows it all in one dashboard.

Purpose
Defense
Type
Self-hosted server
Difficulty
Advanced
License
CopyleftGPL-2.0(一部の構成要素は Apache-2.0)
Category
Vulnerability scanning / Forensics
Actively updatedstars17,410Last update 2026-10-24
Read the Wazuh review

Suricata

Impact Reaches others
OISF/suricata

An intrusion detection and prevention engine (IDS/IPS) that matches network traffic against rules and records suspicious activity as alerts.

Purpose
Defense
Type
Self-hosted server
Difficulty
Intermediate
License
CopyleftGPL-2.0
Category
Network
Actively updatedstars6,773Last update 2026-10-23
Read the Suricata review

Sources

  1. 不正アクセスによるお客様情報の流出に関するお詫びとお知らせjp.adventurekk.com · Published 2026-10-09(opens in a new tab)
  2. 【重要】当社よりお送りした「個人情報の流出に関するお知らせ」メールについてjp.adventurekk.com · Published 2026-10-08(opens in a new tab)
  3. 【重要】お問い合わせ窓口の混雑およびメール送受信の遅延・障害についてskyticket.jp · Published 2026-10-09(opens in a new tab)
  4. 【重要】メールサーバー障害の復旧に関するお知らせskyticket.jp · Published 2026-10-10(opens in a new tab)
  5. 不正アクセスによるお客様情報の流出に関するお詫びとお知らせ(第2報)jp.adventurekk.com · Published 2026-10-16(opens in a new tab)