Adventure: unauthorized access to the skyticket back-office system
Adventure said a vulnerability in the skyticket back-office system was exploited on 20 September and found on 28 September. Names, phone numbers and refund bank account details of 17,780 records (with duplicates) leaked or may have leaked; some also include email addresses and birth dates (68) or addresses (18). The same notice disclosed two other unrelated cases.
Disclosed
2026-10-09
Organizations involved
1
Leaked or at risk
17.8K
17,780
Downtime
Unknown
Timeline
- Started 2026-09-20
- Detected 2026-09-28
- Disclosed 2026-10-09
- 19 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, ShibuyaPersonal services and entertainment
Adventure, Inc.
Sources
- [1][Official]不正アクセスによるお客様情報の流出に関するお詫びとお知らせAdventure · 2026-10-09