TOKYO - All Nippon Airways Co. said Friday that personal data, including passport numbers, was leaked from about 37,800 customers following unauthorized access to a contractor for its passenger service system.
As companies across various industries in Japan continue to report data leaks, the Japanese Foreign Ministry said Friday it had also been targeted by unauthorized access and that personal information handled on a network connected to external systems may have been leaked.
About 3,600 records containing personal information, such as email addresses and names, may have been compromised, including 900 records belonging to people outside the ministry, it said. The ministry said unauthorized access had not been confirmed in a separate closed network where highly confidential information is handled.
ANA said Thursday that one of its contractors, Spain-based Amadeus IT Group S.A., had suffered unauthorized access.
The airline followed up Friday with further details, saying the affected individuals were among customers who booked flights operated by the airline from Aug. 10, 2023, to Sept. 23, 2026.
The leaked information included names, reservation numbers, travel dates and flight segments, while no credit card information or passwords were compromised. Of the total, 1,700 customers also had their passport numbers and nationalities leaked.
Amadeus detected the unauthorized access on Sept. 24, ANA said. The Spain-based company also provides services to Japan Airlines Co., which has reported a suspected leak of customer records.
Muji brand operator Ryohin Keikaku Co., meanwhile, said Friday that up to 27.26 million customer records may have been leaked following unauthorized access to its official app, though names and credit card information were not exposed.
The possibly leaked information, including data on customers who have withdrawn from the Muji App, may include email addresses, dates of birth and customers' genders, the company said.
Although no misuse of the information has been confirmed, the company has urged customers not to click on links in suspicious emails, which may be phishing attempts. The company will notify affected customers individually.
The official app and its online store continue to operate normally, it said.
