Skip to content
JAENES
SPossible leakOctober 30, 2026 announced

全日本空輸(ANA)Data breach / unauthorized access incident

笹尾 祐太朗の写真Reviewed by Yutaro SasaoWritten by Leak Watch editorial team published ・ updated
Occurred on
August 10, 2023
Announced on
October 30, 2026
Severity
SCompromise of deep personal data or usable credentials.
Scale
37,800 people
Main impact
There is evidence that unauthorized access to flight reservation data allowed third parties to view personal information of 約3万7800人, and of those 約1700人 may also have had identity verification information such as passport numbers viewed.
Information involved
Full nameIdentity verification dataEmail addressPhone numberUser / member ID
Cause / key point
It was announced that reservation data were accessed due to unauthorized access to the Spain-based アマデウス社 cloud-based reservation system Altea.
Industry
Transport & travel
Listing / capital
Listed company
Last updated
October 31, 2026

Where to go for this information

The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.

Ask AI about this incident

Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.

Ask ChatGPT ↗Search Perplexity ↗

Full nameIdentity verification dataEmail addressPhone numberUser / member IDHow severity is assessed →

Is this incident worth paying attention to?

Written & reviewed

笹尾 祐太朗の写真

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.

CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.

Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:

Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction

Related incidents

Browse the database →

Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).

Incidents related to "パスポート"

Incidents where the damage spread through the same service or system.

Same attack method

Same industry

Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)

Read the Unauthorized access (method undisclosed) guide and national trends →

← Back to Breach Watch