Security KnowledgeInspect with AI
← Incident database

skyticket-server-2026 · Disclosed 2026-10-08

skyticket: server intrusion and retained payment-log exposure

About 14.64 million records leaked, including about 4.13 million with hashed passwords. A follow-up corrected the earlier exclusion of card data, reporting historical card information for up to 6,140 people.

Cause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    Management functions were abused on October 2–4 to access other servers and cloud data.

    [s1]§1(1)
  • Reported fact

    About 14.64 million records leaked; about 4.13 million include hashed passwords and must not be added to the total.

    [s1]§1(1)
  • Reported fact

    The October 16 follow-up corrected the first report: historical premium-fee card data for up to 6,140 people leaked.

    [s2]冒頭 / §1
  • Reported fact

    Retained payment logs and encryption information were obtained on October 3. Benefit-service IDs, names and passwords also leaked.

    [s2]§1–2

Timeline

  1. Reported server-access period began. [s1]

  2. Server intrusion detected. [s1]

  3. Earlier exclusion of card data corrected. [s2]

Reported response

  • Reported fact

    Access paths were blocked and users notified. The follow-up says isolation of retained logs was in progress.

    [s1][s2]初報 §3 / 第2報 §3

Cause and mitigation hypotheses

Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.

Evidence relevant to prevention

Insufficient evidence

The entry mechanism is undisclosed; avoidability cannot be assessed. Inspect exposure, privileges, logs and retained data using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

The specific entry cause and retention of other historical card data remain under investigation. Do not combine with the separate business-system or bus cases.

Sources

  1. [s1] アドベンチャー · Primary source

    不正アクセスによるお客様情報の流出に関するお詫びとお知らせ ↗

    Published 2026-10-09 · Reviewed 2026-10-19

  2. [s2] アドベンチャー · Primary source

    不正アクセスによるお客様情報の流出に関するお詫びとお知らせ（第2報） ↗

    Published 2026-10-16 · Reviewed 2026-10-19

  3. [s3] アドベンチャー · Primary source

    【重要】当社よりお送りした「個人情報の流出に関するお知らせ」メールについて ↗

    Published 2026-10-08 · Reviewed 2026-10-19