沖縄ツーリストData breach / unauthorized access incident
- Occurred on
- Unconfirmed
- Announced on
- June 23, 2021
- Severity
- SSLarge-scale compromise of sensitive data such as payment or identity-verification records affecting millions.
- Scale
- 730,000 people
- Main impact
- It was announced that services operated by 沖縄ツーリスト leaked personal data for up to 73万人, including customer names, dates of birth, addresses, phone numbers, email addresses, and driver's license numbers. Credit card information was not stored in the affected system and no leakage was confirmed.
- Information involved
- Full nameDate of birthHome addressPhone numberEmail addressUser / member IDIdentity verification data
- Cause / key point
- The cause was not identified in the article, and no attack method was described.
- Industry
- Transport & travel
- Listing / capital
- UnlistedParent company (listed holding company): 丸紅(8002)
In 2021年6月, 丸紅 acquired 80% of the shares and brought it under its control.
- Sources
- Last updated
- October 26, 2026
Stock price reaction to the disclosure丸紅・親会社(上場持株会社) 8002
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "クレジットカード"
Incidents where the damage spread through the same service or system.
- Sカプコン(CAPCOM ID)2026.10.22 announced・Affected 11,774,247 records
- SSリクルート(カーセンサーnet、C-MATCH)2026.10.21 announced・Affected 3,709,551 records
- SGMOインターネット(お名前.com デスクトップクラウド)2026.10.21 announced・Affected 26,739 records
- Aラクスライトクラウド(ブラストメール)2026.10.21 announced・Affected Unknown
- A株式会社日建学院(事前確認講習システム) / (公財)マンション管理センター2026.10.20 announced・Affected 3,597 people
- Aニフティ(回線申込・受付管理システム)2026.10.19 announced・Affected 542,513 records
Same attack method
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bユミルリンク(メール配信システム)2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- SSSアドベンチャー(スカイチケット)2026.10.10 announced・Affected 14,640,000 records
- S日水物流(ニッスイグループ)2026.10.07 announced・Affected Unknown
- Sあいの風とやま鉄道株式会社2026.09.15 announced・Affected 1,409 people
- S西武鉄道(52席の至福)2026.09.02 announced・Affected 500 people
- Aエイチ・アイ・エス(HIS タイ現地法人)2026.10.07 announced・Affected 627 people
- A佐川急便(お荷物問い合わせ)2026.10.01 announced・Affected Unknown
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →