Notice and Apology Regarding the Potential Leakage of Personal Information


Notice and Apology Regarding the Potential Leakage of Personal Information
PIECE HOSTEL KYOTO
PIECE HOSTEL SANJO
TUNE STAY KYOTO
20 PIECES
22 PIECES
41 PIECES
HIDEOUT SUITE
30PIECES
BAND HOTEL HAKATA
We have discovered that unauthorized access occurred through the Booking.com management platform used by our company, resulting in the possibility that personal information held by our company may have been exposed to unauthorized third parties.
We sincerely apologize to our guests and all concerned parties for the significant concern and inconvenience this incident has caused.
We would like to provide the following information regarding the facts confirmed to date and the actions we are taking.
1. Overview and Timeline of the Incident
On October 13, 2026, at approximately 8:00 PM (Japan Standard Time), a large number of reservations were made at our properties at unauthorized rates, resulting in numerous overbookings.
We immediately reported the incident to Booking.com and changed our account passwords. We also contacted guests whose reservations had been made at unauthorized rates.
We are currently working with Booking.com to investigate the cause of the incident and determine the extent of its impact.
2. Personal Information That May Have Been Exposed
Category | Information Confirmed to Date |
Affected individuals | Guests who made reservations through Booking.com |
Number of affected individuals | Under investigation |
Types of personal information | Names, addresses, telephone numbers, email addresses, etc. |
Affected period | Under investigation |
We are currently investigating whether any personal information was actually leaked and, if so, the extent of the exposure.
3. Impact Confirmed to Date
As of 5:30 PM (Japan Standard Time) on October 16, 2026, we have not confirmed any cases of misuse of personal information resulting from this incident.
We will continue our investigation to determine whether any personal information was exposed and assess the possibility of further harm.
4. Actions We Are Taking
We are currently taking the following measures:
・Investigating the cause of the unauthorized access and identifying the extent of its impact.
・Reviewing and updating our login and authentication procedures.
・Reporting the incident to the relevant authorities.
・Working with specialists to implement measures to prevent similar incidents from occurring again.
・Establishing a dedicated contact point for inquiries regarding this incident.
5. Important Notice to Our Guests
Please be aware that fraudulent emails or messages impersonating Booking.com (phishing attempts) may be sent in connection with this incident.
We strongly advise you not to open any suspicious links or attachments.
Neither our company nor Booking.com will ask you to provide passwords or authentication credentials by email or telephone.
Furthermore, any emails sent by our company regarding this incident will never contain links requesting you to enter passwords or authentication credentials.
6. Next Steps
Based on the findings of our investigation, we will implement the necessary security measures to protect personal information.
Should any additional information requiring disclosure become available, we will promptly provide updates through our official website.
Once again, we sincerely apologize to all affected guests and concerned parties for the concern and inconvenience caused by this incident.
7. Contact Information
Guest Inquiry Desk
Contact: Head office
Telephone: +81-75-644-5878
Office Hours: Monday–Friday, 9:00 AM–6:00 PM (Japan Standard Time)