Ainokaze Toyama Railway: unauthorized access to the Ichiman Sanzen Shaku Monogatari tourist train seat system
On 8 September, Ainokaze Toyama Railway, a public-private railway in Toyama City, found bookings in the seat system of its Ichiman Sanzenshaku Monogatari tourist train that had not gone through the normal process. It found the system had been accessed several times from 2 to 8 September, and names, addresses, phone numbers and emails of 1,409 passengers and bookers may have leaked. Card payments use another company's system, and no card data leaked.
Disclosed
2026-09-15
Organizations involved
1
Leaked or at risk
1.4K
1,409
Downtime
Unknown
Timeline
- Started 2026-09-02
- Detected 2026-09-08
- Disclosed 2026-09-15
- 13 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Toyama, ToyamaTransport and postal services1,409 leaked
Ainokaze Toyama Railway Inc.
Sources
- [1][News]あいの風とやま鉄道、不正アクセスで個人情報約1400人分流出かNikkei
- [2][News]乗客1409人の情報漏えいか あいの風とやま鉄道 不正アクセス受けThe Hokkoku Shimbun
- [3][Official]弊社観光列車の座席管理システムに対する不正アクセスによりお客様の個人情報が漏えいしたおそれがある事象についてAinokaze Toyama Railway · 2026-09-15