JR中央交通, JR West and JR Kyushu announced that personal information of some users of Express Reservation and SmartEX had been disclosed to external parties. The affected information included email addresses, member IDs, names written in katakana and membership categories. The cause was reportedly unauthorized access to an external email delivery service.
It was confirmed that personal information of some users of the JR Group's Express Reservation and SmartEX had been viewed and obtained by external third parties. The leaked information included email addresses, member IDs, names written in katakana, membership categories and other data.
The incident is believed to have affected emails sent through Cueneote FC, an email delivery service provided by external vendor Ymirlink, and notification was received that the information had been viewed and obtained by a third party.
The 3 companies immediately suspended use of the email delivery service in question and reported the incident to Japan's Personal Information Protection Commission. Users believed to be affected are expected to be contacted individually, while additional information on the overall extent of the damage is awaited.