14.6 mil. records potentially leaked from travel site | NHK WORLD

14.6 mil. records potentially leaked from travel site

The operator of a Japanese travel booking website says more than 14 million customer records may have leaked in an unauthorized access incident.

The company, Adventure, runs the Skyticket website. It says the breach occurred from October 2 to 4, and it may have exposed about 14.6 million records, including names, dates of birth, email addresses and phone numbers.

The company also says there was a separate unauthorized access of its business management system on September 20. More than 17,000 customer records may have been compromised or leaked in that breach. The information includes bank account numbers registered by customers for refunds.

The company says it's blocked the point of entry used in the unauthorized access and disabled the use of registered credit cards on its website.

Adventure is warning that customers may receive fraudulent emails requesting their passwords and credit card numbers. It's urging people not to click on any links in such emails.