Skyticket Travel Platform Users' Credit Card Data Compromised
Japanese travel platform Skyticket has disclosed a data breach affecting 6,140 users, resulting in the exposure of their credit card information following a cyberattack.
Tokyo, Japan – Travel platform Skyticket announced on Monday that it has been the victim of a cyberattack, leading to the compromise of credit card information for 6,140 users.
The affected users are those who registered and used their credit cards to pay for the "Skyticket Premium" paid membership service between February 2017 and June 2018. The leaked data includes credit card numbers, cardholder names, and expiration dates. Skyticket stated that credit card security codes were not affected.
Skyticket initially stored credit card information on its own servers. In June 2018, the company transferred the management of this data to a payment service provider. However, during the migration process, transaction logs for "Skyticket Premium" payments, which contained customer credit card details, were not deleted and remained on the original server.
The company has reported that it has not yet identified any misuse of the leaked information or subsequent financial losses. Skyticket has requested its payment service provider to contact credit card companies to monitor for suspicious transactions. The platform urges affected customers to review their credit card statements since October for any unusual activity and to consider changing their credit card details to prevent potential fraud.