Resorts Ryukyu: unauthorized access to the property management system used by Hotel Resort Inn Ishigakijima
The property management system used by Hotel Resort Inn Ishigakijima, run by Resorts Ryukyu, was accessed by a third party from the night of 18 September to the evening of 19 September, and guest data of several properties using the system was taken. For this hotel, 17,170 guests and people with bookings between 12 February 2023 and 24 June 2027 are affected: names, emails, phone numbers, addresses, birth dates, genders, occupations, nationalities and more, plus passport images of 234 people. The system provider was not named.
Disclosed
2026-10-05
Organizations involved
1
Leaked or at risk
17.2K
17,170
Downtime
Unknown
Timeline
- Started 2026-09-18
- Disclosed 2026-10-05
- 17 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Supply chain
Organizations involved
[Through a supplier][Critical]Okinawa, TomigusukuAccommodation, food and drink17,170 leaked
Resorts Ryukyu Inc.
Sources
- [1][Official]【重要】宿泊管理システムへの不正アクセスに伴う「ホテルリゾートイン石垣島」のお客様情報の漏えいに関するお詫びとお知らせResorts Ryukyu · 2026-10-06
- [2][Official]宿泊管理システムへの不正アクセスに伴う「ホテルリゾートイン石垣島」のお客様情報の漏えいに関するお詫びとお知らせResorts Ryukyu · 2026-10-05