> JapanHacked_
[Contained][Severity: Critical][Intrusion]

All Nippon Airways Trading: unauthorized access to the Eraberu e-GIFT corporate gift service

On 24 August, All Nippon Airways Trading said the management system of Eraberu e-GIFT, its digital gift service for companies, was accessed by a third party on 11 and 12 August. A page listing names, company names, company IDs, login IDs and partial email addresses of client company contacts was viewed for several minutes, and some users' gifts were fraudulently exchanged by a third party. Its second report on 4 September said the exchanges were caused by this access; it found the cause, fixed the system and resumed the service.

Disclosed

2026-08-24

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Started 2026-08-11
  2. Disclosed 2026-08-24
  3. 13 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak][Fraud][Service outage]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address][Employment]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]「選べるe-GIFT」に対する不正アクセスについて(第1報)All Nippon Airways Trading · 2026-08-24
  2. [2][Official]「選べるe-GIFT」に対する不正アクセスについて(第3報・最終報)All Nippon Airways Trading · 2026-10-16