Data breaches reported for Legoland Japan Hotel and Hassha All Right Net

Two separate data breaches have been reported involving Japanese travel and reservation services.

LEGOLAND Japan LLC announced that an unauthorized access incident occurred on the online booking platform used by the Legoland Japan Hotel. The platform operator, Amadeus IT Group, S.A., reported that some customer contact information, including names, email addresses, and phone numbers, was accessed. An investigation confirmed that approximately 1,557 reservations may have been affected. The company has advised customers to remain vigilant against fraudulent emails, SMS, or WhatsApp messages.

Separately, Kobo, the operator of the highway bus reservation site ‘Hassha All Right Net’, announced a breach involving an API server used for external partner integration. The incident potentially affects up to 8,341 reservation records belonging to 5,614 individuals for travel occurring between July 16 and November 29. Compromised data includes names in katakana, phone numbers, travel dates, routes, and reservation numbers. The company stated that credit card details, bank account information, addresses, email addresses, and passwords were not stored on the affected system.