Seibu Railway: 52 Seats of Happiness booking data viewable from outside
On 2 September, Seibu Railway said encoded booking data for its tourist restaurant train "52 Seats of Happiness" could be viewed from outside. It learned of this from an inquiry on 27 August and blocked access the same day. About 500 people are affected: names, addresses, phone numbers, emails, member numbers and requests for special care sent after booking; about 30 of them include allergies, wheelchair use or similar needs.
Disclosed
2026-09-02
Organizations involved
1
Leaked or at risk
500
500
Downtime
Unknown
Timeline
- Started 2025-01-09
- Detected, Resolved 2026-08-27
- Disclosed 2026-09-02
- 601 days
Attack or cause
- Method
- [Misconfiguration]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ToshimaTransport and postal services500 leaked
Seibu Railway Co., Ltd.
Sources
- [1][Official]【お詫び】西武 旅するレストラン「52席の至福」における予約関連情報の一部漏えいについてSeibu Railway · 2026-09-02