H.I.S. Hotel Holdings Co., Ltd. has confirmed that the operator of an external service used for distributing email newsletters to members of its own website has a suspected information leak due to unauthorized access from outside.
We are currently investigating the facts to understand the extent of the damage and to prevent secondary harm.
We sincerely apologize for the great inconvenience and concern caused to the affected customers and all related parties.
1. Overview and Background
Our company distributes a monthly email newsletter to hotel members through an external service, but the contracted company suffered a hacking incident due to unauthorized access. Following the notification confirming the leakage of contract information with our company, it was also discovered that the members' "distribution list" may have been leaked as additional information.
2. Information Suspected to Have Been Leaked Externally
The "names" and "email addresses" of approximately 140,000 hotel members may have been illicitly extracted.
* Credit card information is not included.
3. Future Measures
While we continue to confirm detailed information through reports and investigations from the relevant external service company, if any incidents such as misuse of personal information occur involving the affected customers, we intend to take appropriate measures. We will promptly report to the Personal Information Protection Commission. Additionally, regarding the publicly disclosed vulnerability in PHP (programming language), we have upgraded our reservation site and completed the necessary security measures. Currently, our reservation site is operating normally and securely.
<For Inquiries Regarding This Matter>
H.I.S. Hotel Holdings Co., Ltd. Customer Service Desk
050-1743-0810