楽天トラベルData breach / unauthorized access incident
- Occurred on
- Unconfirmed
- Announced on
- October 26, 2026
- Severity
- SSLarge-scale compromise of sensitive data such as payment or identity-verification records affecting millions.
- Scale
- 2,600,000 people
- Main impact
- 楽天トラベル's overseas hotel booking site suffered unauthorized access, potentially exposing up to 約260万件 of customer information (names, email addresses, phone numbers, internal identification numbers), up to 約4万件 of reservation records, and credit-card payment data for about 約3万6000件 of those reservations (issuer identification number and last 4 digits, cardholder name, expiration date, and card brand classification).
- Information involved
- Full nameEmail addressPhone numberUser / member IDCard & payment data
- Cause / key point
- Compromise due to unauthorized access (external unauthorized access).
- Industry
- Transport & travel
- Listing / capital
- Listed companyGroup-listed company: 楽天グループ(4755)
楽天トラベル is a travel reservation service operated by 楽天グループ.
- Sources
- Last updated
- October 27, 2026
Stock price reaction to the disclosure楽天トラベル
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Other incidents at 楽天トラベル
Incidents related to "クレジットカード"
Incidents where the damage spread through the same service or system.
- A株式会社グッドスマイルカンパニー2026.10.23 announced・Affected Unknown
- SSSカプコン（CAPCOM ID）2026.10.22 announced・Affected 11,774,247 records
- SSリクルート（カーセンサーnet、C-MATCH）2026.10.21 announced・Affected 3,709,551 records
- SGMOインターネット（お名前.com デスクトップクラウド）2026.10.21 announced・Affected 26,739 records
- Aラクスライトクラウド（ブラストメール）2026.10.21 announced・Affected Unknown
- A株式会社日建学院（事前確認講習システム） / （公財）マンション管理センター2026.10.20 announced・Affected 3,597 people
Same attack method
- A佐川急便（お荷物問い合わせ）2026.10.01 announced・Affected 53,230,000 records
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bユミルリンク（メール配信システム）2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
Same industry
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
- SSヤマト運輸(クロネコ代金後払いサービス)2026.09.29 announced・Affected 5,310,000 records
- SS沖縄ツーリスト2021.06.23 announced・Affected 730,000 people
- S日水物流(ニッスイグループ)2026.10.07 announced・Affected Unknown
- Sあいの風とやま鉄道株式会社2026.09.15 announced・Affected 1,409 people
- S西武鉄道（52席の至福）2026.09.02 announced・Affected 500 people
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →