> JapanHacked_
[Contained][Severity: Critical][Intrusion]

Heisei Enterprise: highway bus booking site tampered with; 15,493 records including 6,949 card numbers may have leaked

Code on Heisei Enterprise's highway bus booking site was tampered with, and 15,493 sets of data entered from 13 to 28 September may have leaked, 6,949 of them with card details.

Disclosed

2026-11-04

Organizations involved

1

Leaked or at risk

15.5K

15,493

Downtime

Unknown

What happened

  1. A user reported that the booking completion page looked wrong, which revealed that the site's code had been tampered with. [1]

  2. The tampering was fixed. [1]

  3. Affected users were notified. [1]

Impact

Names, addresses, phone numbers and other data from 15,493 entries made on Heisei Enterprise Co., Ltd.'s booking site from 13 to 28 September may have leaked, 6,949 of them with card numbers, security codes, cardholder names and expiry dates. A few misuse reports have come in. [1]

Nippon TV reports that the booking site continued operating while the malicious code was present. The company attributed the roughly one-month delay in notifying users to shortcomings in its internal reporting process. [2]

Timeline

  1. Detected 2026-09-27
  2. Disclosed 2026-11-04
  3. 38 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Postal address][Phone number][Payment card]

Organizations involved

  • [Breached][Critical]Saitama, ShikiTransport and postal services15,493 leaked

    Heisei Enterprise Co., Ltd.

    Names, addresses, phone numbers and other data in 15,493 bookings on its site, 6,949 of them with card numbers, security codes, cardholder names and expiry dates.

Sources

  1. [1][News]高速バス予約サイト、クレジットカード情報６９４９件漏えいか…サイトプログラム改ざんされるYomiuri Shimbun · 2026-11-04 05:00
  2. [2][News]高速バス予約サイト「不正アクセス」でクレカ情報が約7000件漏えいか 不正利用の報告も 埼玉・志木市「平成エンタープライズ」Nippon TV · 2026-11-04 13:48