← Incident database

ainokaze-reservations-2026 · Disclosed 2026-09-15

あいの風とやま鉄道: unauthorized access and impact

The reservation system was accessed repeatedly between September 2 and 8; the cause is under investigation. Information for 1,409 customers may have leaked; card payment was processed in an independent system.

Cause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    The reservation system was accessed repeatedly between September 2 and 8; the cause is under investigation.

    [s1]§§1-4 / Q4
  • Reported fact

    Information for 1,409 customers may have leaked; card payment was processed in an independent system.

    [s1]§§1-4 / Q4

Timeline

  1. Event date reported by the source. [s1]

  2. Disclosure date established by the reviewed notice. [s1]

Reported response

  • Reported fact

    Online reservations were suspended and affected customers notified.

    [s1]§§1-4 / Q4

Cause and mitigation hypotheses

Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.

Evidence relevant to prevention

Insufficient evidence

Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

The undisclosed details must remain unknown.

Sources

  1. [s1] あいの風とやま鉄道 · Primary source

    あいの風とやま鉄道:事故に関する公表資料 ↗

    Reviewed 2026-10-09