Japan Airlines says hackers stole reservation data of about 92,000 customers

Japan Airlines (JAL) has disclosed that hackers stole reservation data belonging to about 92,000 customers, the latest in a string of cyber incidents hitting major Japanese companies. According to The Record, which reported the disclosure on October 28, 2026, JAL published a notice that day after its systems provider, Amadeus IT Group, flagged the intrusion the week before.

What happened

JAL said Amadeus — which runs the airline's reservation, ticketing and check-in systems — told it the previous week that attackers had accessed a portion of customer reservation data, The Record reports. The exposure affects passengers on JAL and Japan Transocean Air flights. The airline put the number of affected customers at roughly 92,000. JAL said flight operations were never affected and that credit card numbers were not compromised. The company named no threat actor and did not describe the incident as ransomware, according to the report.

What data was taken

For about 2,000 JAL customers, the stolen information included passport numbers, frequent flyer numbers, email addresses and phone numbers, The Record says. For all affected customers, the attackers took names, reservation codes and flight information. JAL said it would contact affected customers individually and warned them to watch for phishing emails, fraudulent phone calls and fake websites impersonating the JAL Group.

Who is affected

Beyond the airline's own customers, the breach adds to mounting pressure on corporate Japan. The Record notes that Sony Network Communications said on October 27 that more than 2.5 million people had data stolen in a breach earlier in the month, while separate incidents reportedly exposed around 11 million Burger King Japan records and about 11.7 million Capcom accounts. A large Japanese online financial services company also offered to compensate customers after an attack on its foreign-exchange trading service caused financial losses.

Broader context

The wave has drawn a government response. According to The Record, citing the Japan Times, Prime Minister Sanae Takaichi held a cabinet meeting on October 26 focused on the attacks and pledged emergency measures to protect companies and citizens, calling the situation serious. The report adds that Japanese Defense Minister Shinjiro Koizumi discussed the attacks with U.S. Defense Secretary Pete Hegseth in the Philippines, and that the two sides said they would continue strengthening cooperation to limit the impact of such activity. JAL customers who receive breach notifications should treat any related calls, emails or links with caution given the elevated phishing risk.