Japan Airlines Experiences Cyberattack, Apologizes for Travel Disruptions

Japan Airlines (JAL), the nation’s second-largest airline following All Nippon Airways (ANA), faced a cyberattack on Thursday that temporarily disrupted its operations. While the airline managed to resolve the issue promptly, the incident caused delays to both domestic and international flights.

According to Japan Airlines, the cyberattack led to complications in the baggage check-in system, resulting in flight delays at multiple Japanese airports. However, the airline confirmed there were no significant cancellations or widespread disruptions. Public broadcaster NHK reported delays affecting over a dozen flights.

“We have identified and resolved the issue and are now monitoring the system’s recovery,” JAL announced on X, the social media platform formerly known as Twitter. The airline also stated that ticket sales for flights departing on Thursday had been temporarily suspended. “We deeply apologize for the inconvenience caused,” the post added.

The disruption began early Thursday morning at 7:24 a.m. local time (2224 GMT Wednesday), with the airline pinpointing the issue to a malfunctioning router. By 8:56 a.m., the problematic device was isolated, and recovery efforts were underway.

Following the announcement, JAL shares dropped as much as 2.5% during morning trading but showed slight recovery later in the day.

Cybersecurity Concerns in Japan

This incident adds Japan Airlines to a growing list of prominent Japanese organizations targeted by cyberattacks. In recent years, the country has witnessed significant breaches across various industries, raising concerns about national cybersecurity preparedness.

In 2023, Japan’s space agency JAXA revealed it had been targeted by unidentified cybercriminals, though no sensitive data regarding rockets or satellites was compromised. That same year, Nagoya Port, one of Japan’s busiest shipping hubs, suffered a ransomware attack attributed to the Russia-based group Lockbit, which temporarily halted operations.

Even government agencies have not been immune. Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC), tasked with protecting against such attacks, was reportedly breached for nine months in 2023. Meanwhile, a cyberattack on a Toyota supplier in 2022 forced the automaker to shut down operations at domestic plants for a day.

More recently, in June 2024, the video-sharing platform Niconico suspended its services due to a large-scale cyberattack, underscoring the growing threat to businesses across Japan.

Strengthening Cyber Defenses

As cyberattacks against Japanese organizations increase, experts emphasize the importance of strengthening national and corporate cybersecurity measures. Japan Airlines’ quick response highlights the need for robust protocols and rapid incident management strategies to minimize disruption in such events.