According to Security NEXT, Nippon Travel Agency and JR West discovered on November 28, 2025, that passenger records for certain TWILIGHT EXPRESS Mizukaze departures were missing from a data server [1]. The missing data involved approximately 900 records covering boarding dates, room numbers, service details, and allergy information for select departures between October 2024 and November 2025, but did not include names or addresses [1]. The operators believe the files were likely deleted by mistake, confirmed no external intrusion or data leakage after investigation, and reported the matter to the Personal Information Protection Commission [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Dec 29, 2025 and we added it on Nov 10, 2026. It is not a new event.
InfoMonitoringBackfillMedia reported
Nippon Travel Agency and JR West Report Loss of Approximately 900 Twilight Express Mizukaze Passenger Records, Deny Data Breach
1 min read
- Disclosed
- Dec 29, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Transportation & logistics
What to do nowOur advice
The operators believe the files were likely deleted by mistake, confirmed no external intrusion or data leakage after investigation, and reported the matter to the Personal Information Protection Commission [1].
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Verified Source Summary
Nippon Travel Agency and JR West discovered on November 28, 2025, that passenger records for certain TWILIGHT EXPRESS Mizukaze departures were missing from a data server [1].
The missing data involved approximately 900 records covering boarding dates, room numbers, service details, and allergy information for select departures between October 2024 and November 2025, but did not include names or addresses [1].
The operators believe the files were likely deleted by mistake, confirmed no external intrusion or data leakage after investigation, and reported the matter to the Personal Information Protection Commission [1].
References
Media1
- [1]
“日本旅行とJR西日本は、過去に寝台列車を利用した乗客に関する一部個人情報が消失したことを明らかにした。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.