> JapanHacked_
[Resolved][Severity: Major][Intrusion]

JTB: its US group companies were accessed without authorization, and 2,525 romanized names and 2,396 email addresses of travelers may have leaked

Three group companies including JTB Americas were accessed, and romanized names and emails of Look JTB customers from January 2012 to June 2020 may have leaked.

Disclosed

2021-08-18

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. On this day local time, JTB Americas, Ltd., JTB USA, Inc. and JTB International (Canada), Ltd. were accessed without authorization. The affected servers and networks in the US were cut off. [1]

  2. It announced the case and notified the customers concerned individually. [1]

  3. JTB USA published its investigation result. No leak of personal data was confirmed. Servers had been stopped, and the JTBUSA.com and LOOK TOUR.net sites were running slowly. [2]

Information that may have leaked

2,525 romanized names and 2,396 email addresses used to log in to RAKU Navi Support, of customers who traveled (or planned to travel) to the mainland US (excluding Hawaii) and Canada on the overseas package tour Look JTB between January 2012 and June 2020. The names and emails are kept separately and not linked. No effect on group companies in Japan or other regions was confirmed. [1]

Timeline

  1. Started, Detected 2021-07-29
  2. Disclosed 2021-08-18
  3. 20 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address]

Organizations involved

  • [Breached][Major]Tokyo, MinatoPersonal services and entertainment2,525 leaked

    JTB Corp.

    The affected companies were its group companies in the US and Canada.

Open in organization search

Sources

  1. [1][News]JTB米国海外グループ会社へ不正アクセス、ローマ字氏名とメールアドレス流出の可能性ScanNetSecurity · 2021-08-20 08:00
  2. [2][News]JTB USAへの不正アクセス、個人情報流出は確認されずScanNetSecurity · 2021-09-02 08:05