SHINDO3

Japan Airlines

Personal dataup to28,000people

POSSIBLE LEAKPhone number / Full nameUnauthorized access · Investigating

Open in the live monitor ▶
Disclosed
Feb 13, 2026
Detected
Feb 9, 2026
Detection to disclosure
4 days
Leak
Leak possible
Type
Unauthorized access
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityName
ContactPhone number, Email address
Account dataJAL Mileage Bank membership number
Transactions & activityBooked flight details, Delivery details

Not leaked

  • No impact on systems other than the baggage delivery booking system

How many

  • Customers who booked or used the service since 10 July 2024 up to 28,000 people

Who is affected

  • Customers who booked or used the same-day baggage delivery service

Cause

The booking system was breached by a third party; the route is not stated in the article

Timeline

  1. Detected
  2. Security NEXT report date

Response

  • Service stopped
  • Forensic investigation

Suspended the service until safety is confirmed; investigating

What you should do

  1. Don't open links in emails from this company. The apology email itself may be fake
  2. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources