Japanticket: customer data leak through an analytics tool
Intruders reached an outside analytics tool used by booking site operator Japanticket and took up to 264,000 customer records, possibly including 70,000 Mt Fuji trail bookings.
Disclosed
2026-10-30
Organizations involved
2
Leaked or at risk
264K
264,000
Downtime
Unknown
What happened
Japanticket detected and blocked unauthorized access to an outside analytics tool it uses. Customer data may have been taken before 15 September. [1]
Japanticket published the incident. Yamanashi Prefecture said users of its Mt Fuji trail booking system may be included. [1] [2] [3]
Impact
Up to 264,000 customer records leaked: names and kana, email addresses, phone numbers, country or region, booking details and the notes field. No card data is included, and no password leak has been confirmed. [1]
According to Yamanashi Prefecture, data of 70,000 people who used the Yoshida trail booking system in fiscal 2024, such as names, email addresses and phone numbers, may be among them; the prefecture is checking. [2] [3]
Response
Japanticket reported to the Personal Information Protection Commission and the police. [1]
Timeline
- Detected 2026-10-28
- Disclosed 2026-10-30
- 2 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Supply chain
Organizations involved
[Breached][Critical]Tokyo, ShibuyaInformation and communications264,000 leaked
Japanticket Inc.[Through a supplier][Major]Yamanashi, KofuPrefecture70,000 leaked
Yamanashi PrefectureIt contracts out the Mt Fuji Yoshida trail booking system to Japanticket. Names, email addresses, phone numbers and more of 70,000 people who booked in fiscal 2024 may be included.
Sources
- [1][Official]お客様情報の漏えいについて（ご報告・第1報）Japanticket · 2026-10-30
- [2][News]富士登山7万人の個人情報が漏えいか 予約システムの委託会社関連で不正アクセス 山梨YBS Yamanashi Broadcasting · 2026-10-30 20:17
- [3][News]富士山 吉田ルートの通行予約システムに情報漏えいの可能性NHK · 2026-10-30 22:02