Kobo: unauthorized access to the Hassha Orai Net partner API server

On 15 October, Kobo, which runs the Hassha Orai Net highway bus booking site, said its partner API server, used to provide booking services to bus operators, received suspicious access between 16 and 19 September and found traces of booking data being sent out. It detected this on 13 October. Up to 8,341 bookings of 5,614 people (548 bookings of 448 people made on Hassha Orai Net itself) for travel between 16 July and 29 November are affected: names in katakana, phone numbers and trip details.