エイチ・アイ・エス(HIS タイ現地法人)Data breach / unauthorized access incident
- Occurred on
- Unconfirmed
- Announced on
- October 7, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- 627 people
- Main impact
- Unauthorized access to the Thai local subsidiary's file server may have exposed passport numbers, expiration dates, alphabetic names, etc., of up to 627 customers who traveled to Thailand; passport images were confirmed leaked in some cases.
- Information involved
- Identity verification dataFull nameDate of birthHealth & medical data
- Cause / key point
- Unauthorized third-party access to the Thai subsidiary's file server (detected in 2025-12, revealed by an external expert investigation in 2026-02).
- Industry
- Transport & travel
- Listing / capital
- UnlistedParent company: エイチ・アイ・エス(東証プライム 9603)
HIS's Thai local subsidiary
- Last updated
- October 20, 2026
Stock price reaction to the disclosureエイチ・アイ・エス・親会社 / 東証プライム 9603
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "パスポート"
Incidents where the damage spread through the same service or system.
Same attack method
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bユミルリンク(メール配信システム)2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- S日水物流(ニッスイグループ)2026.10.07 announced・Affected Unknown
- Sあいの風とやま鉄道株式会社2026.09.15 announced・Affected 1,409 people
- S西武鉄道(52席の至福)2026.09.02 announced・Affected 500 people
- A佐川急便(お荷物問い合わせ)2026.10.01 announced・Affected Unknown
- A日本郵便(郵便局アプリ)2026.09.29 announced・Affected 19 people
- Aニッポンレンタカーアプリ(ニッポンレンタカーサービス株式会社)2026.09.26 announced・Affected 41 people
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →