2025.04.11
[Important Notice] [Final Report] Regarding Unauthorized Access to Our Hotel Management System
We would like to inform our guests and stakeholders of the findings of our investigation regarding the unauthorized access to the hotel management system used by [Hotel Name] (hereinafter referred to as “our hotel”), which resulted in certain reservation information being accessed by a third party.
Background and Details
Between June 28 and July 30, 2024, unauthorized access by a third party occurred on the hotel management system used by our facility. On February 13, 2025, we were notified by the system provider that reservation data may have been accessed during this period.
Affected Individuals and Information
A total of 846 reservation records associated with guests who booked or stayed with us between June 2024 and June 2026 may have had the following information accessed:Guest names and phone numbers
Of those, 16 records also included addresses, and 7 included email addresses
Please note that no credit card information was included in the accessed data. Although one record did include encrypted credit card information, it was securely encrypted and there is no indication that the information was compromised.
Cause of the Incident
According to the system provider, there was a surge of phishing attacks during the period in question, in which websites closely resembled the official website were used to steal login credentials. Upon comparing access logs from that period, we believe it is highly likely that an employee’s account information was obtained via a fake login page created by a malicious third party.
Measures Taken and Future Prevention
In collaboration with the system provider, we have taken the following steps:
Immediate password changes
Implementation of two-factor authentication (2FA)
Notification alerts for new device logins
In addition, based on the findings from external investigation, we have conducted further staff training to strengthen internal awareness and security protocols.
We deeply apologize once again for any concern or inconvenience caused to our guests and related parties.
We remain committed to enhancing our security measures and sincerely appreciate your continued understanding and support.
For Inquiries Regarding This Matter
Email: info@all-day-place.com
General Manager
all day place shibuya