From our other sites
The story
On the 9th, JR East announced that personal information such as email addresses may have leaked for a combined total of approximately 2.06 million members of “eKiNet” and “Otona no Kyujitsu Club” (Adult Holiday Club). The cause was unauthorized access to the data center of SoftBank subsidiary IDC Frontier, and for Adult Holiday Club members, the exposed data reportedly includes membership numbers, credit card expiration dates, and dates of birth. While addresses and credit card numbers themselves are said not to have leaked, the forum saw a wave of reports that suspicious phishing emails resembling the real ones had already been showing up for a while, splitting reactions between resignation that personal data has basically leaked everywhere already, and calls for the company to be held liable for damages.
On the 9th, JR East revealed that personal information, including email addresses, belonging to a combined total of roughly 2.06 million members of “eKiNet” and “Otona no Kyujitsu Club” may have been leaked. This reportedly stems from unauthorized access to the data center of SoftBank subsidiary IDC Frontier.
According to JR East, the possible leak covers about 1.67 million accounts from eKiNet, the train ticket reservation and purchase service, and about 390,000 accounts from Otona no Kyujitsu Club, a membership service for people aged 50 and over. For eKiNet, email addresses may have been exposed; for Otona no Kyujitsu Club, membership numbers, credit card expiration dates, and dates of birth may have leaked in addition to email addresses.
JR East says this leak did not expose addresses or credit card numbers themselves. It also says that while member email delivery has been partially disrupted for both services, train ticket reservations and other functions are working as usual.
Source: news.yahoo.co.jp / Original article here
What people said
That used to be a classic phishing move back in the day
I'm not even an eKiNet member but I get phishing emails that look just like theirs
Every single day, too
Then go ahead and post your real name and address right here
You don't mind, right?
You're fine
Personal info is leaking everywhere at this point anyway
Unless you're a celebrity or a star, don't worry about it
Infrastructure-related targets are going to get hit next, bit by bit
I can't help but think they'll make their real move once everything's paralyzed by simultaneous attacks
Next thing you know someone's pulled off identity theft, stuff you never ordered starts showing up at your door, a "tokuryu" crew (a loosely organized, anonymously recruited ad-hoc crime gang) comes knocking, and finally the grand finale where your assets get drained down to zero
JR West uses the J-WEST Card
They'll probably slip out their own announcement while everyone's distracted by this mess
Wonder what happens from here
In the end everyone's assets get drained and it's game over for all of us
I'd love to know what kind of life they're living
Name, address, email, phone number — that much is probably fine.
It's your credit card or driver's license that turns it into a real problem.
For numbers I don't recognize, I look them up before calling back
I ignore any text message that isn't a login verification code
I figure just doing that much keeps you protected
I have a driver's license but I'm a "paper driver" (licensed but never actually drives). Don't have a credit card.
The only thing I'm signed up for is Amazon.
What kind of life are you living? 😮💨
The real nationwide catastrophe is still ahead of us
Might be a few years off, but it's coming
My name, email, address, and phone number have probably already been scattered everywhere ages ago
If it's already circulating under the #AssetsZero hashtag, maybe nothing bad actually happens at this point?
AI is basically the ultimate hacker now
It's only a matter of time before credit card info leaks too
Crypto exchanges and the like are seriously in danger as well
I was talking to a telemarketer once and they told me my name, address, phone number, and even my school name were all on their list
Probably cross-referenced from multiple leaked databases, but it genuinely freaked me out
Having a photo ID attached to it is the real killer
Not individual members?
Once it becomes "everyone's doing it so it's fine," it's over
I honestly think the biggest blame lies with the government for allowing companies to trade personal data with each other in the first place.
The problem is, calculating the damages is pretty much impossible
If anything, the companies are the victims here too
You can't sue for damages until actual harm has occurred
The people who use it to travel are middle-class or above, after all
A solid list of paying, high-value members
Sounds like a "tokuryu" crime crew is standing by for this one
Terrifying
Name and address are the bad part
Unlike other info, you can't easily change your name or the fact that you own a house or condo
Name and address are things anyone can get just by pulling the property registry anyway, so it's not that big a deal
Maybe people will start appreciating being a transferred-for-work renter after all?
Background and Key Points of This Story
This leak traces back to unauthorized access at data center operator IDC Frontier, a SoftBank-affiliated company. On the forum, other companies’ names, including Times Car, also came up, sparking discussion that leaks through the same channel could extend to multiple businesses. Opinions split over how serious the real-world damage actually is: some said a leaked email address alone is nothing to be shocked about, while others argued that membership services like Adult Holiday Club — where credit card expiration dates and dates of birth are also exposed — carry a much higher risk of abuse. This time, addresses and card numbers themselves reportedly were not leaked, and the easily overlooked practical point is that the bigger concern isn’t direct financial loss, but staying alert to sophisticated phishing emails crafted using the leaked data.
*This article is excerpted and summarized from the 5ch (News Express+) thread “[JR East] Possible Leak at “eKiNet” and “Adult Holiday Club” — 2.06 Million Records Total“.
Leave a Reply