Okinawa Tourist (OTS) announced on October 23 that it had discovered that the personal information of users of five services it operates had been leaked externally.
While conducting an initial investigation following an inquiry from outside the company, OTS identified the possibility of a leak and blocked external access to the affected websites from October 18 to ensure security. From 4:30 p.m. on October 20, it temporarily suspended the acceptance of new bookings for five services: OTS Rent-a-Car, OTS HOTEL, OTS ACTIVITIES, the Digital DMO Platform, and OTS Club. The company determined that a leak had occurred after confirming that information believed to have been leaked externally matched information it held.
Up to approximately 730,000 people may be affected. The information stored in the systems believed to be involved in the leak included names, dates of birth, gender, addresses, telephone numbers, email addresses, Facebook IDs, driver’s license issue dates and expiration dates, and driver’s license numbers (all relating only to Japanese driver’s licenses).
Credit card information was not held in the affected systems, and no leak of such information has been confirmed. Images of driver’s licenses, involving up to 6,000 records, are stored in a separate database, and the company is continuing to investigate whether they were leaked.
Okinawa Tourist is taking measures including reporting the incident to the police and Japan’s Personal Information Protection Commission. The company is urging customers to beware of emails, SMS messages, phone calls, and other communications impersonating Okinawa Tourist or related parties, stating that it will never ask for passwords or credit card information through these methods.
Notice
This article was generated using automatic translation by GPT-4 API. The translation may not be accurate.
