Skyticket Data Breach
Adventure Inc., the Tokyo-listed operator of Japanese travel and flight booking platform Skyticket, disclosed a severe data breach involving unauthorized intrusions into its server and cloud databases.
Exposed Data Types
8- Names
- Dates of birth
- Email addresses
- Phone numbers
- Physical addresses
- Passwords
- Bank account numbers
- Partial credit card data
About This Breach
The attacks, which occurred between late September and early October 2026, exposed approximately 14.64 million customer records. The compromised data encompasses full customer names (including passport-formatted romanized spellings), dates of birth, email addresses, phone numbers, postal codes, and physical addresses. Furthermore, approximately 4.13 million hashed member passwords and nearly 18,000 refund-destination bank account records were compromised during the intrusions.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
