Security KnowledgeInspect with AI
← Incident database

skyticket-business-system-2026 · Disclosed 2026-10-09

skyticket: vulnerability exploitation in a business-management system

A business-system vulnerability was exploited on September 20. Exposure affects 17,780 records including refund-account details; duplicates are included and some counts remain under investigation.

Cause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    A business-system vulnerability was exploited on September 20 and detected on September 28.

    [s1]§1(2)
  • Reported fact

    The 17,780 records include duplicates and refund-account details. The 68 email/birth-date records and 18 address records are subsets, not additional totals.

    [s1]§1(2)

Timeline

  1. Unauthorized business-system access occurred. [s1]

  2. Unauthorized access detected. [s1]

Reported response

  • Reported fact

    The company reported blocking access paths, addressing vulnerabilities and notifying the privacy regulator.

    [s1]§3

Cause and mitigation hypotheses

Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.

Evidence relevant to prevention

Insufficient evidence

The entry mechanism is undisclosed; avoidability cannot be assessed. Inspect exposure, privileges, logs and retained data using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

Product, CVE, pre-intrusion patch availability and confirmed exfiltration scope are undisclosed; patch neglect is not established.

Sources

  1. [s1] アドベンチャー · Primary source

    不正アクセスによるお客様情報の流出に関するお詫びとお知らせ ↗

    Published 2026-10-09 · Reviewed 2026-10-19