H.I.S. Hotel Holdings announced on October 22 that an operator of an external service used to distribute email newsletters to members through its website had been subject to unauthorized access, potentially resulting in the leakage of personal information.
The company distributes monthly email newsletters to hotel members through the external service, whose contractor was affected by unauthorized access. Following notification that the leakage of contract information had been confirmed, it was also discovered that the members’ mailing list may have been leaked.
The information suspected of having been leaked includes the names and email addresses of approximately 140,000 hotel members. No credit card information was included.
H.I.S. Hotel Holdings is currently confirming the details based on reports and an investigation by the external service provider, and said it will promptly report the matter to Japan’s Personal Information Protection Commission. Should any incidents occur, such as the misuse of affected users’ personal information, the company plans to take appropriate measures.
Regarding the publicly disclosed PHP vulnerability, the company said it has updated its hotel reservation website and completed its security measures. The reservation website is operating normally, it added.
Notice
This article was generated using automatic translation by GPT-4 API. The translation may not be accurate.
