Bus ticket reservation portal suffers unauthorized API access, up to 8,341 records leaked
Written by AI from 1 report listed below. Not checked by a person before publication. How we use AI
On 15 October the operator of the bus ticket reservation portal 発車オーライネット announced that a third‑party unauthorized access to its external partner API server had leaked reservation data.
The suspicious access occurred between 16 September and 19 September, was detected on 13 October and the server was immediately blocked; leaked information may include travel dates, katakana reservation names, phone numbers and reservation details such as travel date, route and reservation number, while credit‑card, bank‑account, address, e‑mail and password data were not stored. The operator said the maximum number of affected records is 8,341 involving 5,614 people, with 548 records and 448 people linked to the 発車オーライネット portal, and it has reported the incident to the Personal Information Protection Commission and filed a police report.