Overview
"Up to 627" passport records (romanised names, signature-panel names, gender, birth dates, passport numbers, expiry) and allergy data (count blank). No phones, addresses, emails or cards. Detected 11 Dec 2025; PPC notified 29 Dec 2025; first general public notice is this 7 Oct 2026 document.
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 子会社ファイルサーバへの不正アクセスによる個人情報流出の可能性に関するお詫びとお知らせ株式会社エイチ・アイ・エス · 2026-11-09