It was confirmed that notifications redirecting customers who had made reservations at “ Kansai Airport Washington Hotel” (hereinafter “the facility”), operated by Flat Field Operations Co., Ltd. (Headquarters: Izumiotsu City, Osaka Prefecture; Representative Director: Makoto Hirano; hereinafter “the Company”), to a phishing site (*) were sent. However, following an investigation, it was determined that the personal information of some customers who had made reservations at the facility had been compromised.
We sincerely apologize for the significant inconvenience and concern this has caused our customers and all other parties involved.
1. Background
Based on reports from customers to the Facility via Contact us, it was confirmed that notifications directing some customers to a phishing site were sent on Sunday, January 4, 2026.
Furthermore, our investigation confirmed that a cyberattack resulted in unauthorized logins to part of the online reservation site at Overseas(hereinafter referred to as “the reservation site”), leading to the leakage of personal information belonging to some customers.
Immediately after the incident occurred, we took steps to have affected customers change their login passwords and conduct security checks on their computers.
Please note that, as of now, there have been no reports of financial losses.
*A “phishing site” refers to a fake website that impersonates a real website in order to fraudulently obtain personal or financial information using unauthorized methods.
2. Information That May Have Been Compromised
Affected Customers: Customers who made reservations at our facility through the aforementioned booking site between January 4, 2025, and January 6, 2026.
Information Categories: Name, phone number, reservation date, reservation number
For some customers, credit card information, payment details, and nationality may have been accessible; we are currently investigating the details.
Regarding other information, we are continuing to assess the scope of the impact and will promptly Newsas soon as new facts are confirmed.
3. Our Response
・We have been contacting the customers affected by the issue described in Section 2 above, starting on Friday, January 9, 2026, to provide explanations and apologize. We will continue to address this matter through the contact point at Contact us.
・We completed our report to the Personal Information Protection Commission on Friday, January 9, 2026.
・We have long been thoroughly implementing measures such as multi-factor authentication and prohibiting logins via URL links, and we will continue to do so while strengthening information security training for our employees.
・We will work to prevent a recurrence and restore trust by investigating the cause in collaboration with relevant authorities and implementing necessary measures.
・If you receive a suspicious message, please do not Access & Directionson any attached URL links, and carefully verify the payment method details listed on your reservation confirmation. In the unlikely event that you are asked to make a payment other than what is specified on your reservation confirmation, please contact our customer service desk. We appreciate your cooperation in this matter.
We would like to once again offer our sincere apologies for any inconvenience and concern this may have caused our customers and all other parties involved.
4. Contact us,
. Please direct any inquiries regarding this matter ( Contact us) to the contact point listed below.
Customer Service
Flat Field Operations Co., Ltd.
Kansai Airport Washington Hotel
Phone: 072-434-3905
Hours: 10:00 a.m. to 6:00 p.m. (weekdays)
Email: contact@kansai-wh.com