Travelko website breach exposes 381,926 subscriber email addresses
Japanese travel comparison site Travelko’s own website was breached, exposing 381,926 email addresses registered for its newsletter. Some records also included prefectures and postal codes. This was a separate incident from the earlier breach at its contractor Arara, and most of the exposed email addresses overlapped between the two incidents.
Key facts
- Affected organization
- Travelko
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- 381,926 newsletter registration email addresses, plus prefectures and postal codes in some records
- Cause / method
- Unauthorized access to its own website
- Location
- Japan
If your data was exposed
Exposed dataEmailAddress
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- A breach of Travelko’s own website was revealed to have exposed 381,926 newsletter email addresses and some location information.
6 related reports
- トラベルコに不正アクセス、メールアドレス38万1,926件が流出 アララへの攻撃とは別事案、被害情報は大半が重複
- 旅行比較サイト「トラベルコ」のウェブサイトに不正アクセス、メールマガジン登録者のメールアドレス 381,926件が流出
- トラベルコのウェブサイトへの不正アクセス（2026年11月）｜メルマガ登録者のメールアドレス流出と、利用者・比較サイトの会社がやること〖随時更新〗
- 旅行情報サイト「トラベルコ」、メアド38万件漏洩 不正アクセスで
- トラベルコ不正アクセス：メール38万件の対象確認と偽メール対策、アララとの違い
- トラベルコに不正アクセス、メールアドレス38万1,926件が流出。今度は委託先ではなく自社サイトから出た
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.