ainokaze-reservations-2026 · Disclosed 2026-09-15

あいの風とやま鉄道: unauthorized access and impact

The reservation system was accessed repeatedly between September 2 and 8; the cause is under investigation. Information for 1,409 customers may have leaked; card payment was processed in an independent system.

Cause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

Reported fact
The reservation system was accessed repeatedly between September 2 and 8; the cause is under investigation.
[s1]§§1-4 / Q4
Reported fact
Information for 1,409 customers may have leaked; card payment was processed in an independent system.
[s1]§§1-4 / Q4

Timeline

2026-09-02
Event date reported by the source. [s1]
2026-09-15
Disclosure date established by the reviewed notice. [s1]

Reported response

Reported fact
Online reservations were suspended and affected customers notified.
[s1]§§1-4 / Q4

Evidence relevant to prevention

Insufficient evidence

Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

The undisclosed details must remain unknown.

Sources

[s1] あいの風とやま鉄道 · Primary source
あいの風とやま鉄道：事故に関する公表資料 ↗
Reviewed 2026-10-09