Science & Tech · Cybersecurity · 2 hrs ago
Club Tourism says data from 4.32 million members may have been exposed
Club Tourism says an unauthorised access incident may have exposed member data at the Japanese travel company.
The company is part of KNT-CT Holdings and the affected people are members registered with its online booking system.
The information that may have been exposed includes names, addresses, phone numbers and email addresses.
Passport details, credit card information and login passwords were not included, the company said.
Club Tourism detected the access and isolated the affected server, while blocking communications from the source of the attack.
The company's website has been taken offline to limit further harm and support the investigation.
It plans to restore the site once its safety has been confirmed.
Club Tourism said about 4.32 million members’ records may have been exposed after unauthorised access.
The potentially exposed information includes names, addresses, phone numbers and email addresses.
The affected records belong to members registered with the company’s online booking system.
The company said passport details, credit card information and login passwords were not included.
Club Tourism isolated the affected server and shut down its website while it investigates and works to prevent further damage.
- Who
- Club Tourism, a subsidiary of KNT-CT Holdings, and members registered with its online booking system.
- What
- The company said unauthorised access may have exposed about 4.32 million members’ records.
- When
- The company detected the unauthorised access at 5:45 a.m. on October 30.
- Where
- Club Tourism’s online booking system and the server that was accessed.
- Why
- Not stated
This story does not have two clearly opposing sides.
Club Tourism detected unauthorised access from outside the company.
The company’s investigation found that some user information may have been exposed.
Club Tourism isolated the affected server, blocked communications from the source of the attack and shut down its website.
- Potentially affected records
- About 4.32 million member records
- Information potentially exposed
- Names, addresses, phone numbers and email addresses
- Information excluded
- Passport details, credit card information and login passwords
- Detection time
- October 30 at 5:45 a.m.
- Website status
- Shut down pending investigation and safety checks