Japan Airlines (JAL) said one of its IT providers suffered a data breach that leaked the personal records of more than 90,000 customers, according to The Record (28 Oct 2026).

The Record reports that JAL published a notice on Wednesday (28 October) saying Amadeus IT Group, the company that runs its flight reservation, ticketing and check-in systems, informed it last week that hackers accessed a 'portion of customer reservation data' for Japan Airlines and Japan Transocean Air flights; in total 92,000 customers were affected, with names, reservation codes and flight information accessed, and for about 2,000 customers passport numbers, frequent flyer numbers, email addresses and phone numbers were also taken.

According to The Record, JAL said the breach never affected flight operations and credit card numbers were not compromised, and that it will contact affected customers individually, including reminders to watch for phishing emails, fraudulent phone calls and websites impersonating the JAL Group.

ITmedia NEWS (28 Oct) reports that JAL and Japan Transocean Air (JTA) said Amadeus reported the unauthorised access to them on 23 October; that the traces of outside access cover part of the reservation records for JAL and JTA flights from 10 August 2023 to 23 September 2026; that for the about 2,000 customers the items accessed also include nationality, ticket number and seat number; that no leak of credit card numbers or passwords has been confirmed; that Amadeus has already completed the necessary security measures and, as of 28 October, no misuse of the information had been confirmed; and that a dedicated inquiry line opens on 29 October (our translation from Japanese).