November 5, 2026: AIRDO, the Sapporo-based airline, said unauthorised access to its external email-delivery system leaked up to 673,920 customer email addresses. It says names, addresses, phone numbers and payment cards were not in the take. Reservation, operations and My AIRDO mail is stopped. The catalog entry records the email ceiling.
What is known
- AIRDO was told on 28 October 2026. The public notice is dated 5 November.
- The leaked set is email addresses only, maximum 673,920. Boarding-pass and delay mail that used to arrive automatically will not, until the mailer is restored.
- Japanese press (Nikkei / Kyodo) named Arara as the vendor. AIRDO's own page does not. The same week's ARARA Message platform report covers 81.3 million unique emails across about 380 clients; do not add the AIRDO figure on top of that total.
What is not known
- How many of the 673,920 addresses are unique people versus repeat bookings.
- Whether any other AIRDO field later turns up in a vendor file. The airline's current statement is emails only.
- When reservation mail will resume.
A leaked airline inbox is enough for "your flight is cancelled, rebook here" phishing. Keep the reservation number from the booking screen; you will need it at the airport.
Who is at risk
AIRDO passengers whose address sat in the mailer — anyone who received booking, check-in or delay mail through that system. My AIRDO members waiting on membership-change mail are in the same outage, even if their address is not later confirmed in the leaked set.
What to do
- Use AIRDO's website for reservation status, online check-in and delay information. Do not open a "boarding QR" from unexpected mail.
- Write down the reservation number shown on the booking screen. AIRDO says you will need it for later changes.
- On iPhone, add the pass to Apple Wallet from the issue screen; on Android, save the PDF. Do not wait for the usual mail.
- Treat AIRDO-branded mail about refunds or My AIRDO password resets as hostile until the company says mail has resumed.
- If you also fly Solaseed Air, see that carrier's separate notice — same vendor week, different census.
Sources
Sourcing note: 673,920 and the emails-only finding are AIRDO's. The Arara vendor name is from Japanese press, not from AIRDO's page.