The document this correction applies to
Timely disclosureWhat was corrected and how
A subsequent correction by the company to the contents of an already published filing.
Apology and Notice Regarding the Leakage of Customer Information Due to Unauthorized Access
Open the original document“1. Overview of the Incident,” (1) “Leaked Information,” and the paragraph at the end of “1. Overview of the Incident”
Credit card information had not been leaked, and we did not store customers’ credit card numbers
Credit card information of some customers who used “skyticket Premium” (credit card number, cardholder name and expiration date), as well as Benefit Station member IDs, names and passwords, had been leaked. Some card information relating to payments made before June 2018 remained on our servers.
We are currently reviewing the impact of this incident on the performance of our group. If any matters requiring disclosure come to light, we will disclose them promptly.
Before June 2018, card information was stored on our servers. Although the card information was deleted during the migration, change histories (logs) relating to membership-fee payments remained without being deleted. This was because it was discovered that the logs had been obtained through unauthorized access on 3 October 2026.
| Item | Details |
|---|---|
| Disclosure subject to correction | Apology and Notice Regarding the Leakage of Customer Information Due to Unauthorized Access |
| Original disclosure date | 9 October 2026 |
| Location of correction | “1. Overview of the Incident,” (1) “Leaked Information,” and the paragraph at the end of “1. Overview of the Incident” |
| Details of correction | Credit card information had not been leaked, and we did not store customers’ credit card numbers → Credit card information of some customers who used “skyticket Premium” (credit card number, cardholder name and expiration date), as well as Benefit Station member IDs, names and passwords, had been leaked. Some card information relating to payments made before June 2018 remained on our servers. |
| Reason for correction | Before June 2018, card information was stored on our servers. Although the card information was deleted during the migration, change histories (logs) relating to membership-fee payments remained without being deleted. This was because it was discovered that the logs had been obtained through unauthorized access on 3 October 2026. |
| Impact on Business Performance | We are currently reviewing the impact of this incident on the performance of our group. If any matters requiring disclosure come to light, we will disclose them promptly. |
The reasons the company gives
The company's own explanation, not something inferred from the numbers.This is because a subsequent investigation found that change histories (logs) for membership-fee payment information from before June 2018 had not been deleted and remained on our servers, and that they had been obtained through unauthorized access on 3 October 2026.