Japanese travel agency H.I.S. reports possible passport data leak
TOKYO (Kyodo) -- Major Japanese travel agency H.I.S. Co. said Wednesday that passport information for as many as 627 of its customers may have been le
Japanese travel agency H.I.S. Co. reported on Wednesday that passport data for up to 627 customers may have been exposed late last year due to unauthorized access to its Thai subsidiary's server. The breach was first detected by an unauthorized-access detection system on December 11, 2025. H.I.S. Tours Co., the affected subsidiary, promptly disconnected the compromised server and tightened network access.
Investigations revealed that the server, which held personal information collected in Japan, had been breached. H.I.S. delayed disclosing the incident publicly, despite external experts confirming passport numbers could have been compromised in February, due to the time-consuming process of accurately analyzing and verifying the vast data stored in the server.
The leaked information included names, genders, birth dates, passport numbers, and expiration dates. It also contained additional details such as allergies but did not include phone numbers, addresses, email addresses, or credit card information. H.I.S. sincerely apologized for the inconvenience caused and pledged to contact affected customers whose contact information could be identified.
Meanwhile, non-life insurer Sompo Japan Insurance Inc. disclosed the same day that around 60,000 customer records from its rental dashcam service might have been leaked via unauthorized access to a contractor's server on Friday and Saturday. The potentially exposed data included names, phone numbers, addresses, workplaces, email addresses, and dashcam serial numbers. However, Sompo Japan has not confirmed any misuse of the breached information.
Written by urgent.news from The Mainichi's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
