Zero Radar
← feed
MediumData breachupdated 29 Oct 2026, 22:09 UTC

Japan Airlines passenger data exposed via third-party system breach

A travel-industry software provider used by Japan Airlines was hacked, and some customers' personal details may have been stolen. Passport numbers and contact details are among the data reported as taken.

Attacks reported (The Record)2 independent sources
SeverityMediumData breach
Being exploited?ReportedBy The Record, not officially confirmed yet
What to doCheck exposureBe cautious of unsolicited messages referencing your JAL travel or passport information and verify them through official channels.
How sure is this?2 independent sourcesSeveral independent publishers agree

How the attack works simplified

  1. 1Attacker breaches systemTargets third-party reservation platform
  2. 2Amadeus PSS compromisedPassenger Service System used by JAL
  3. 3Passenger data stolenPassport and frequent flyer numbers taken
  4. 4Customers at riskExposed to phishing and identity misuse
  5. ResultPassenger personal data exposed to criminals

What happened

A breach at Amadeus's Passenger Service System, a third-party reservation platform used by Japan Airlines, exposed passenger records.

Why it is dangerous: Affected customers face a higher risk of phishing and identity misuse because passport numbers, frequent flyer numbers, email addresses and phone numbers were reportedly stolen. Reports differ on scale, with one citing about 92,000 customers and another about 2,000.

Are you affected?

You are affected if you are a Japan Airlines customer whose booking or frequent flyer data was processed through Amadeus's Passenger Service System.

Japan Airlines customer data held in Amadeus's Passenger Service System; number of customers reported as about 92,000 (BleepingComputer) or about 2,000 (The Record).

What to do

  1. Be alert for phishing emails or calls that reference your Japan Airlines booking or passport details
  2. Watch your frequent flyer account for unfamiliar activity and change its password if you are unsure
  3. Follow official Japan Airlines notices for confirmation of whether your data was included

Timeline

  1. 28 Oct 2026, 20:33 UTC
    Publicly disclosed
  2. 28 Oct 2026, 20:48 UTC
    Picked up by Zero Radar
  3. 29 Oct 2026, 22:08 UTC
    Reported by BleepingComputer · BleepingComputer
  4. 29 Oct 2026, 22:09 UTC
    The Record reported on it · The Record

Sources 2 reports, oldest first

Security press established security newsrooms

Technical details

ID
ZR-17e71a11 · ZR-6297f139
Disclosed
28 Oct 2026, 20:33 UTC
On Zero Radar
28 Oct 2026, 20:48 UTC (15 min after disclosure)
Last change
29 Oct 2026, 22:09 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Japan Airlines passenger data exposed via third-party system breach · Zero Radar