JR Central, JR West, and JR Kyushu have announced that personal information, including email addresses, of some users of the Express Reservation and SmartEX services was leaked externally.
Both services use an email delivery service provided by external vendor Ymirlink. When the company suffered unauthorized access on October 16, it reported that users of both services had not been affected. However, on October 26, the companies were informed that personal information had been viewed or obtained by a third party.
The leaked information includes email addresses, membership IDs, names written in katakana, and membership categories. The companies stated that there is no possibility that other personal information, such as full names, dates of birth, addresses, telephone numbers, credit card numbers, or card expiration dates, was leaked.
Ymirlink is currently confirming the number of affected cases. Those who may be affected are members of the two services who received emails sent using “Cuenote FC,” operated by Ymirlink. These include emails sent to certain members for sales promotion purposes, as well as emails notifying users that the departure times of reserved trains had changed due to the impact of the Kumamoto earthquakes.
No leakage of personal information from the systems for both services held by JR Central has been confirmed.
The three companies immediately suspended use of the email delivery service that was subject to the unauthorized access. They have also reported the matter to Japan’s Personal Information Protection Commission. Affected users will be contacted individually by email or other means.
Notice
This article was generated using automatic translation by GPT-4 API. The translation may not be accurate.
