Japan Airlines: same-day baggage delivery reservation system failure traced to a contractor employee deleting and changing log records
The JAL same-day baggage delivery reservation system failure was caused by a contractor employee deleting and changing log records, fearing a mistake would be found.
Disclosed
2026-02-10
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed unauthorized access by a third party to the reservation system of its same-day baggage delivery service. [1] [2]
It announced the unauthorized access and said it was investigating whether data had leaked. [1] [2]
It published a follow-up. The cause was a contractor employee who, fearing an operating mistake would be found, deleted and changed records in the log. [3]
Timeline
- Detected 2026-02-09
- Disclosed 2026-02-10
- 1 days
Attack or cause
- Method
- [Insider]
- Impact
- [Service outage]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Tokyo, ShinagawaTransport and postal services
Japan Airlines Co., Ltd.A contractor employee deleted and changed log records on the reservation system of the same-day baggage delivery service.
Sources
- [1][Official]「手荷物当日配送サービス」予約システムへの不正アクセスについてJapan Airlines Co., Ltd. · 2026-02-10
- [2][News]JAL「手荷物当日配送サービス」予約システムに不正アクセス、データの外部漏えいの有無について調査を進めるScanNetSecurity · 2026-02-13 08:05
- [3][News]誤操作の発覚を恐れて委託先社員がログから記録を削除・変更したことが原因 ~ JAL「手荷物当日配送サービス」システム障害ScanNetSecurity · 2026-03-09 08:05