All Nippon Airways Trading: unauthorized access to the Eraberu e-GIFT corporate gift service
On 24 August, All Nippon Airways Trading said the management system of Eraberu e-GIFT, its digital gift service for companies, was accessed by a third party on 11 and 12 August. A page listing names, company names, company IDs, login IDs and partial email addresses of client company contacts was viewed for several minutes, and some users' gifts were fraudulently exchanged by a third party. Its second report on 4 September said the exchanges were caused by this access; it found the cause, fixed the system and resumed the service.
Disclosed
2026-08-24
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started 2026-08-11
- Disclosed 2026-08-24
- 13 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Fraud][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, MinatoWholesale and retail trade
All Nippon Airways Trading Co., Ltd.
Sources
- [1][Official]「選べるe-GIFT」に対する不正アクセスについて(第1報)All Nippon Airways Trading · 2026-08-24
- [2][Official]「選べるe-GIFT」に対する不正アクセスについて(第3報・最終報)All Nippon Airways Trading · 2026-10-16