Back to all incidents

Japan Airlines

japanairlines.com
DEVELOPING

Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.

Observable Status DEVELOPING
Industry / Sector Technology & Commercial
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Unattributed / Unknown
Affected Population Scope Under Audit
First Seen 2026-10-28
Last Updated 2026-10-29
Driver's License / State ID Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

46% CONFIDENCE
1. Primary Authority INDEPENDENT VERIFICATION Base weight: 32%
2. Evidence Specificity +7% Domain & Scope Telemetry
3. Corroboration Curve +7% 2 independent domains
4. Timeline & Staleness +0% 2 milestones logged
Corroborated Source Domains:
therecord.media bleepingcomputer.com

Technical Forensic Briefing

Incident Overview

Japan Airlines, within its operating sector, has been subject to a cybersecurity incident. Ground-truth telemetry indicates the threat activity is currently unconfirmed or under forensic attribution.

Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include japanairlines.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (2 events logged)

2026-10-28 20:33 UTC
INDEPENDENT VERIFICATION

Japan Airlines warns of data breach as country grapples with multiple cyber incidents

2026-10-29 22:08 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Japan Airlines suffers third-party data breach exposing passenger info

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub