H.I.S. Hotel Holdings Co., Ltd. has confirmed that the operator of an external service used for distributing email newsletters to members of its own website has a suspected information leak due to unauthorized access from outside.
We are currently investigating the facts to understand the extent of the damage and to prevent secondary harm.
We sincerely apologize for the great inconvenience and concern caused to the affected customers and all related parties.
1. Overview and Background
Our company distributes a monthly email newsletter to hotel members through an external service, but the contracted company suffered a hacking incident due to unauthorized access.
Following the notification confirming the leak of contract information with our company, it has come to light that, as additional information, the members' "distribution list" may also have been leaked.
2. Information Suspected to Have Been Leaked Externally
There is a possibility that the "names" and "email addresses" of approximately 140,000 hotel members were illicitly extracted.
* Credit card information is not included.
3. Future Measures
While proceeding with detailed information verification through reports and investigations from the relevant external service company, if any incidents such as misuse of personal information occur involving the affected customers, our company intends to take appropriate measures.
We will promptly report to the Personal Information Protection Commission.
We would like to report that regarding the publicly disclosed vulnerability in PHP (programming language), we have performed an upgrade on our reservation site, and the security measures have already been completed.
Currently, our reservation site is operating normally and securely.
<For Inquiries Regarding This Matter>
H.I.S. Hotel Holdings Co., Ltd. Customer Service Desk
050-1743-0810