Privacy Unpacked
Menu

Confirmed breach

Rakuten Travel data breach

JPJapan

internationalpress reported a data breach at Rakuten Travel (Japan) on 26 October 2026, and it has been confirmed. It affected 2,600,000 customers. Exposed: Financial account and card details.

If Rakuten Travel had your data

  1. Look for Rakuten Travel’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
  3. Expect scams that use your details: calls, texts or emails pretending to be Rakuten Travel, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

More breaches in Japan

  1. Bandai Logistics PalreportedJPJapan · 27 October 2026 Phone numbersNamesAddresses+1 –not reported
  2. Sony Network CommunicationsJPJapan · 27 October 2026 Financial account and card detailsPasswords and loginsEmail addresses+3 2.6Mcustomer records
  3. JoshinJPJapan · 26 October 2026 Passwords and loginsPhone numbersNames+6 6.2Mrecords
  4. JR EastJPJapan · 26 October 2026 Email addressesNames 170Krecords
  5. Shizuoka CityreportedJPJapan · 26 October 2026 Email addressesNames 10Krecords

Every breach in Japan →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.