アドベンチャー（スカイチケット）Data breach / unauthorized access incident
- Occurred on
- October 2, 2026
- Announced on
- October 10, 2026
- Severity
- SSSIrrecoverable cascades affecting social functions, e.g. credential leaks at a ten-million scale.
- Scale
- 14,640,000 records
- Main impact
- At アドベンチャー, operator of the travel site 「スカイチケット」, approximately 約1,464万件 of registered information was leaked due to multiple unauthorized accesses; of these, 約413万件 included members' login passwords (including hashed storage), account information and about 約1.2万件 of bus reservation data were also viewed in part, and credit card information and passport images were not stored and no leakage of them has been confirmed.
- Information involved
- Full nameDate of birthEmail addressPhone numberHome addressUser / member IDPasswordIdentity verification data
- Cause / key point
- Information was leaked through multiple unauthorized access routes, including improper manipulation of administrative functions, vulnerabilities in business management systems, and a bus reservation page that did not require login, with multiple attacks confirmed.About Exploitation of vulnerabilities
- Industry
- Transport & travel
- Listing / capital
- Unlisted
- Sources
- Last updated
- October 21, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "クレジットカード"
Incidents where the damage spread through the same service or system.
- SSリクルート（カーセンサーnet、C-MATCH）2026.10.21 announced・Affected 3,709,551 records
- A株式会社日建学院（事前確認講習システム） / （公財）マンション管理センター2026.10.20 announced・Affected 3,597 people
- Aニフティ（回線申込・受付管理システム）2026.10.19 announced・Affected 542,513 records
- Bデーリー東北新聞社（受注制作Webページ）2026.10.16 announced・Affected 423 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
Incidents related to "ハッシュ"
Incidents where the damage spread through the same service or system.
- Sクリプトン（SONICWIRE・D2R）2026.10.19 announced・Affected 420,000 records
- Bリンクステーション（GETTIIS会員情報）2026.10.19 announced・Affected Unknown
- Aファンケル・アテニア（EC会員情報）2026.10.16 announced・Affected 834,947 records
- SNTTソルマーレ（コミックシーモア）2026.10.15 announced・Affected Unknown
- Aビューティガレージ（ECサイト(2026年10月)）2026.10.15 announced・Affected 775,725 accounts
- SSライドオンエクスプレス（『銀のさら・釜寅・すし上等』公式サイト・公式アプリ）2026.10.13 announced・Affected 6,500,000 records
Same attack method
- SSHelpfeel（Gyazo）2026.09.16 announced・Affected 23,620,000 records
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSSKDDI(ISP事業者向けメール基盤)2026.06.23 announced・Affected 12,231,954 people
- Sムラウチドットコム2026.09.15 announced・Affected 7,710,000 records
- Sホワイトエッセンス（予約・基幹システム）2026.10.05 announced・Affected 1,050,000 accounts
- ALEAN BODY2026.09.15 announced・Affected 440,000 accounts
Same industry
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- S日水物流(ニッスイグループ)2026.10.07 announced・Affected Unknown
- Sあいの風とやま鉄道株式会社2026.09.15 announced・Affected 1,409 people
- S西武鉄道（52席の至福）2026.09.02 announced・Affected 500 people
- Aエイチ・アイ・エス(HIS タイ現地法人)2026.10.07 announced・Affected 627 people
- A佐川急便（お荷物問い合わせ）2026.10.01 announced・Affected Unknown
Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)
Read the Exploitation of vulnerabilities guide and national trends →