Data breaches hit DHS records, Sony's Japanese ISP and Japan Airlines

· Cybersecurity · United States · Japan

Three separate breaches exposed customer and employee data. More than 41,000 U.S. Department of Homeland Security employee records were leaked online, allegedly stolen from an Okta single sign-on system earlier this year. In Japan, Sony's internet service provider So-net said hackers stole 2.6 million records covering So-net and Plala customers, including 54,401 email account passwords and 16 bank account records. Japan Airlines said a breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers. The incidents underscore how much of the exposure sits with identity providers and third-party platforms rather than the breached organizations themselves.

Why it matters：Identity providers and shared travel platforms concentrate risk across many organizations at once, making third-party assurance as important as securing one's own perimeter.

Key points

  • Over 41,000 DHS employee records were leaked, allegedly from an Okta SSO system
  • So-net lost 2.6 million records, including 54,401 email passwords and 16 bank account records
  • JAL's exposure came through Amadeus's Passenger Service System

Sources (original reporting)

More stories from this day