Japan Airlines (JAL) Data Breach
Flag carrier Japan Airlines Co., Ltd. (JAL) announced on October 28, 2026, that unauthorized access occurred between September 23 and September 26, 2026, within the cloud-based Amadeus Passenger Service System (PSS) used to manage international reservations.
Exposed Data Types
9- Names
- Email addresses
- Phone numbers
- Passport numbers
- Dates of birth
- Genders
- Nationalities
- Travel reservation details
- User IDs
About This Breach
Forensic reviews determined that booking records for approximately 92,000 international passengers were affected.
For roughly 90,000 travelers, exposure was limited to basic itinerary details such as passenger names, flight numbers, travel dates, routes, and booking references (PNRs). For approximately 2,000 passengers, additional fields, including email addresses, telephone numbers, JAL Mileage Bank membership numbers, dates of birth, gender, nationality, and passport details, were also accessed. Payment card numbers and account passwords were not compromised.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
