ENKR

Club Tourism online booking possible member data breach

Add to my breach check

Made public · about 4.32 million records

What leaked7

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Other profile data

Permanent

  • Date of birth
  • Full name
  • Gender
  • Date of birthwith age
  • Mobile numberphone number · type not stated
  • Full namein kanji and kana
  • Other profile datanationality, member ID and emergency contact

To-dos4 · about 50 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  3. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home
  4. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: SMS code theft

What happened next10 events

  1. UndetectedNone on record
  2. Response 10 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. No secondary harm from the incident found as of the notice
  2. Opened a dedicated free phone line for this incident
  3. By the notice date, said it had found the way in and finished fixes and checks of similar issues
  4. Consulted the police by the notice date
  5. Reported by the notice date to the Personal Information Protection Commission and to Club Tourism's supervising authority
5 more
  1. Website stopped as of the notice, to stop further harm and investigate
  2. Apologised to customers in the notice
  3. First notice: about 4.32 million internet member records may have leaked
  4. Cut off traffic to the accessed parts and applied security measures right after detection
  5. Detected unauthorised outside access to part of its servers at 05:45 JST
Company
Club Tourism
When it happened
Company detected it
Made public
Notice
Possible leak
Affected
about 4.32 million records · approx., Club Tourism internet members of its online booking system · possible leak; company notice

Sources