> JapanHacked_
[Contained][Severity: Major][Intrusion]

Ainokaze Toyama Railway: unauthorized access to the Ichiman Sanzen Shaku Monogatari tourist train seat system

On 8 September, Ainokaze Toyama Railway, a public-private railway in Toyama City, found bookings in the seat system of its Ichiman Sanzenshaku Monogatari tourist train that had not gone through the normal process. It found the system had been accessed several times from 2 to 8 September, and names, addresses, phone numbers and emails of 1,409 passengers and bookers may have leaked. Card payments use another company's system, and no card data leaked.

Disclosed

2026-09-15

Organizations involved

1

Leaked or at risk

1.4K

1,409

Downtime

Unknown

Timeline

  1. Started 2026-09-02
  2. Detected 2026-09-08
  3. Disclosed 2026-09-15
  4. 13 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]あいの風とやま鉄道、不正アクセスで個人情報約1400人分流出かNikkei
  2. [2][News]乗客1409人の情報漏えいか あいの風とやま鉄道 不正アクセス受けThe Hokkoku Shimbun
  3. [3][Official]弊社観光列車の座席管理システムに対する不正アクセスによりお客様の個人情報が漏えいしたおそれがある事象についてAinokaze Toyama Railway · 2026-09-15