Unauthorized Access to 'Hassha Orai Net' Highway Bus Reservation Site, Up to 8,341 Records Potentially Leaked

Kobo, the operator of the highway bus reservation site "Hassha Orai Net," announced on October 15 that a portion of reservation information was leaked due to unauthorized access to an API server used for integration with external business partners.

The affected data includes Katakana names, phone numbers, boarding dates, routes, and reservation numbers related to some ride reservations made between July 16 and November 29, 2026. The maximum number of affected records is 8,341, impacting up to 5,614 individuals.

Of these, 548 reservations, affecting 448 individuals, were made directly on Hassha Orai Net. The remaining reservation information pertains to booking services the company provides to bus operators and other partners. Credit card numbers, bank account details, addresses, email addresses, and passwords were not stored.