H.I.S.: unauthorized access to its Thai subsidiary's file server

On 11 December 2025, intrusion detection software on a file server at H.I.S. TOURS, the Thai subsidiary of H.I.S., raised an alert, and the server was cut off from the network. Some data may have been taken, and the server also held personal data collected in Japan. After checking every file, H.I.S. disclosed on 7 October 2026 that passport details (names in Latin letters, signature names, genders, birth dates, passport numbers and expiry dates) and allergy information of up to 627 customers who travelled to Thailand with it in 2017, 2019–2020 and 2024–2025 may have leaked.