[Important] Apology and Report Regarding Guest Information Leakage Due to Unauthorized Access to Our Site Controller
News
To Guests Who Have Stayed or Have a Reservation at FIELD SUITE HAKUBA KITAONE KOGEN
Thank you for your continued support of FIELD SUITE HAKUBA KITAONE KOGEN.
On September 24, we posted a notice on our website warning of suspicious messages and also sent an email alert to guests who had made reservations with us this year.
Following further investigation, it was confirmed that TEMAIRAZU, the system we use to synchronize accommodation reservation information (a “site controller”), had been accessed without authorization by a third party.
We have also been informed by Temairazu, Inc., the operator of TEMAIRAZU, that among reservations for our property made on or before September 21, 2026, those with check-in dates on or after September 21 fall within the scope of reservations that may have been affected by the data breach.
We sincerely apologize for the considerable inconvenience and concern this matter has caused our guests.
■ Timeline
- Late September 21: The system operated by Temairazu, Inc., provider of TEMAIRAZU, was accessed without authorization by a third party.
- Evening of September 23: A guest with an upcoming reservation contacted us after receiving a suspicious message via WhatsApp, and we shared the information internally.
- Morning of September 24: We began contacting the relevant system providers to investigate the matter.
- September 24: We received a security alert from Temairazu, Inc. We posted a warning on our website and also sent precautionary emails to guests whose reservations might potentially have been affected.
- September 26: Temairazu, Inc. identified the cause and completed measures to address the issue.
- September 27: Temairazu, Inc. informed us that information relating to guests of our property was included within the scope of the data breach.
- September 28: Temairazu, Inc. publicly announced the unauthorized access.
Temairazu, Inc. – First Notice (Japanese)
Temairazu, Inc. – First Notice (English) - October 7: Temairazu, Inc. published a further update regarding the unauthorized access.
Temairazu, Inc. – Second Notice (Japanese)
Temairazu, Inc. – Second Notice (English) - October 20: We are scheduled to submit a joint report with Temairazu, Inc. to the Personal Information Protection Commission of Japan.
■ Scope Reported to Us by Temairazu, Inc.
Guests with reservations made for our property on or before September 21, 2026, whose check-in date is September 21 or later.
■ Information Reported to Us by Temairazu, Inc. That May Have Been Viewed or Obtained
- Name
- Postal Address
- Telephone Number
- Email Address
- Accommodation Reservation Information
(name of accommodation, booking site name, reservation number, check-in date, check-out date, accommodation charges, and other related information)
Please note that credit card numbers, booking-site login IDs, and password information are not held in the TEMAIRAZU system.
■ Cause
According to Temairazu, Inc., the incident was caused by a security vulnerability in a function of a service that the company had previously provided, which was exploited by a third party.
No unauthorized access or other irregularities have been identified in the customer management system used by FIELD SUITE HAKUBA KITAONE KOGEN.
■ Measures Taken by FIELD SUITE HAKUBA KITAONE KOGEN
- We have implemented security measures on our side, including changing administrative passwords.
■ Important Precautions for Guests
If you receive any suspicious email or message claiming to be from FIELD SUITE HAKUBA KITAONE KOGEN and asking you to confirm your reservation, enter credit card information, or make a payment, please do not access any URL or link contained in the message and contact us promptly.
Please be particularly cautious of messages that:
- Ask you to enter or re-enter credit card information in order to confirm or secure your reservation
- Urge you to make an immediate payment in order to “hold your room”
- Claim that your reservation has been cancelled and ask you to repeat the booking or payment process
- Ask you to make a payment before arrival in order to “shorten the check-in procedure”
If you receive such a message:
- Do not open any URL or link contained in the message
- Do not enter any credit card or personal information
- Do not reply to the message or make any payment or transfer as instructed
If you have already entered your credit card information, please contact your card issuer immediately and consult them about suspending or blocking the card.
■ How FIELD SUITE HAKUBA KITAONE KOGEN Contacts Guests
FIELD SUITE HAKUBA KITAONE KOGEN will never ask you to enter credit card information or make a payment via WhatsApp or SMS.
We contact guests only by email sent to the email address provided at the time of reservation
(sender: fsh@happoone.co.jp) or by telephone.
■ Preventive Measures
We will continue to confirm the security measures implemented by our external system providers and review how guest information is handled.
We will also strengthen our cooperation with system providers and reinforce the management of guest information in order to prevent a recurrence. Should any new facts come to light, we will provide a further update.
■ Contact
If you receive a suspicious message or have any concerns regarding your reservation, please do not use any link contained in the message. Please contact us directly using the details below.
FIELD SUITE HAKUBA KITAONE KOGEN
Phone: +81-90-2524-4555
Hours: 8:00–17:00 JST
Email: fsh@happoone.co.jp
We once again sincerely apologize for the considerable concern this matter has caused our guests.
FIELD SUITE HAKUBA KITAONE KOGEN
5713 Hokujo, Hakuba-mura, Kitaazumi-gun, Nagano 399-9301, Japan
Operated by Happo-One Development Co., Ltd.
