JR Kyushu announced the possibility of a leak of Web members’ email addresses on the evening of 9 October, but said the results of its investigation on 15 October confirmed that no leak had occurred. Up to 1.3 million email addresses were reportedly affected.
JR Kyushu had been investigating the possibility that email addresses were included in log data related to the distribution of email newsletters to Web members. The maximum number of potentially affected records was reported to be 1.3 million, including newsletters distributed on or after 5 September.
The investigation was conducted by IDC Frontier and began following unauthorised access to its systems. The investigation was prompted by an incident that prevented distribution, while the possibility of a leak involving other elements of personal information had been ruled out.
JR Kyushu said it had been informed that the investigation found no evidence of a personal-information leak, and that it would proceed with preparations for resuming the service and confirming its security.
JR Kyushu said there was no impact on services including JR Kyupo, JQ Card, Internet Train Reservations and SUGOCA.