2026 AIRDO — up to 673,920 customer emails via third-party mailer (Arara); names/cards not leaked
Data compromised
Email addresses, maximum 673,920. AIRDO says names, addresses, phone numbers and payment-card data were not leaked. Reservation, operations and My AIRDO mail stopped.
Technical writeup
Official AIRDO notice 5 Nov 2026. Vendor named Arara by Nikkei/Kyodo, not on the AIRDO page. Same-week ARARA Message platform incident. Count is emails, not unique people.
Root cause
Unauthorised access to the external email-delivery system AIRDO uses for reservation and operations mail. AIRDO was told on 28 October 2026. Nikkei names Arara as the vendor. Mail services stopped.