Japan Airlines (JAL) and Japan Transocean Air (JTA) have disclosed external access to reservation information involving about 92,000 customers. Their October 28 notice says passenger-service provider Amadeus informed them on October 23.
Update — October 30, 2026: Three other Japanese airlines have issued their own notices concerning unauthorized access to reservation information in the Amadeus passenger-service system supplied through ANA.
AIRDO, Solaseed Air and StarFlyer notices
AIRDO, Solaseed Air and StarFlyer each published a notice dated October 29. Each says ANA reported signs that some customer personal information in Amadeus-managed reservations had been viewed through unauthorized access.
The three airlines say they are working with ANA to identify the extent of the impact. StarFlyer says it will inform affected customers once details are confirmed; AIRDO and Solaseed Air say they will provide further information when available.
Their notices do not state affected-customer totals, the full data fields involved or the timing of the access. The 92,000 figure below belongs to the separate JAL/JTA disclosure and must not be applied to these three airlines. The notices also do not establish that every disclosure resulted from one identical access event.
JAL and JTA: what information was involved?
For roughly 90,000 customers, the listed information includes booking references, names, flight dates, sectors and service classes. Another approximately 2,000 customers had additional fields involved, including contact details, passport numbers, nationality and frequent-flyer information.
The airlines say credit-card numbers and passwords were not compromised. Their notice reports no evidence of information misuse, says Amadeus completed security measures, and states that flight operations are unaffected. Those statements describe the position reported in the notice.
Customer contact and the inquiry desk
JAL and JTA say they will contact affected customers individually and warn against impersonation emails, calls and websites. Do not assume that every customer is affected or that all 92,000 had passport information involved.
The dedicated JAL/JTA inquiry desk opened October 29: 10 a.m.–5 p.m. Japan time, weekdays excluding Japanese national holidays. The overseas number is +81-3-4332-7280. Confirm current contact details on the airline’s official notice.
Check an unexpected message independently
NIST’s phishing guidance recommends verifying requests through known contact information or a public company website rather than details supplied in a suspicious message.
For a message claiming to concern this incident, open the airline’s official website independently and use the published inquiry channel. Treat pressure to click, download something, pay or disclose sensitive information as a reason to pause and verify. Do not post booking references or passport details in public comments.
A message containing a correct name or itinerary should still be checked. Keep the distinction between the airlines’ disclosure and the authenticity of a particular message you receive.
More: Japan aviation coverage.
_departing_Osaka_International_Airport.jpg){kind=link}