Japan Airlines Data Breach Exposes Personal Information of 28,000 Customers Japan Airlines (JAL) has disclosed a data breach affecting up to 28,000 customers who used its Same-Day Luggage Delivery Service since July 10, 2024. The unauthorized access occurred at approximately 12:40 a.m. local time on Monday, targeting the reservation system for the baggage delivery service, which transports passengers’ luggage from airports to hotels. Exposed data includes names, email addresses, phone numbers, flight numbers, departure and arrival airports, and hotel names. JAL confirmed that credit card numbers and passwords were not compromised, and no other airline services were impacted. In response, the airline has temporarily suspended the luggage delivery service while investigating the incident. The breach was first reported by News.Az, an Azerbaijani news portal, which noted that the compromised system was accessed by a third party. JAL has not yet identified the attacker or the method of intrusion. The incident highlights growing cybersecurity risks in the travel and logistics sectors, where sensitive customer data is frequently handled.

South Korea Fines Luxury Brands $24.9 Million Over Data Breaches South Korea’s privacy regulator has levied fines totaling 36 billion won ($24.9 million) against the Korean subsidiaries of Louis Vuitton, Dior, and Tiffany following separate data breaches that exposed millions of customers’ personal information. The penalties stem from investigations confirming unauthorized access to sensitive customer data, though specific details on the breaches’ scope and timing remain undisclosed. The fines highlight growing regulatory scrutiny over data protection in South Korea, where authorities are enforcing stricter compliance with privacy laws. The incident underscores the financial and reputational risks for global brands handling large-scale consumer data. In related cybersecurity developments, Japan Airlines reported that up to 28,000 customers were affected by unauthorized access to its baggage service system, while Volvo Group disclosed that 16,991 employees were impacted as part of a broader Conduent data breach, which has now exposed 25 million individuals. These incidents reflect the escalating threat landscape for both corporate and personal data security.

Japan Airlines Restores Systems After Cyber Attack Causes Flight Delays Japan Airlines (JAL), the country’s second-largest airline, confirmed it had fully restored its systems following a cyber attack that disrupted operations on Thursday. The incident, which began at 7:24 a.m. local time (2224 UTC), led to temporary flight delays at multiple Japanese airports, though no mass cancellations were reported. To contain the issue, JAL took immediate action by shutting down a malfunctioning router and suspending ticket sales for flights departing the same day. While the airline did not disclose specific details about the attack, it confirmed the cause and scope of the disruption had been identified. Public broadcaster NHK noted that over a dozen flights experienced delays, though overall disruptions remained limited. The incident adds to a growing list of cyber threats targeting major Japanese organizations. In 2022, a cyber attack on a Toyota supplier forced a temporary halt to domestic production. Earlier this year, video-sharing platform Niconico suspended services due to a similar attack, while Japan’s space agency, JAXA, reported a breach in 2023 though no sensitive data was compromised. The event follows a separate technical issue last week that grounded American Airlines flights.