ANA Reports Data Breach Affecting Over 37,000 Users

The exposure of passport numbers and nationalities—even for a subset—puts this beyond a routine data incident, because those are the exact identifiers airlines rely on for cross-border verification and that attackers value for identity fraud. It also shifts scrutiny onto third-party contractors, a recurring weak point in aviation IT where carriers outsource core passenger systems. The open question is whether ANA discloses how the breach occurred and what contractual or technical controls failed, since regulator and customer response will hinge on that detail more than on the raw count.