PHP Vulnerability Responses by Company

株式会社アドベンチャー(Adventure)

Companies / web services
Aliases / services
アドベンチャー / Adventure Inc / skyticket / スカイチケット / skyticketプレミアム / 株式会社アドベンチャー(Adventure) / 株式会社アドベンチャー
Official website
https://adventure-inc.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

skyticket account / booking data

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The October 2–4 intrusion exposed about 14.64 million records. The initial card-data exclusion was corrected for Premium in the second report.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Change passwords through the official site/app and elsewhere if reused; review bookings and statements.

Official service URL

Source URLs

  1. Initial disclosure, October 9https://skyticket.jp/news/maintenance/67603/Service and operation documentation
  2. Dedicated contact and guidance, October 13https://skyticket.jp/news/maintenance/67625Service and operation documentation
  3. Card-data correction and second report, October 16https://skyticket.jp/news/world/67630/Service and operation documentation

skyticket business management / refund data

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

A separate intrusion affected 17,780 records including refund accounts, with further scope being investigated; passport-number exposure remained under review.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Beware of refund scams and report suspicious transactions to your bank.

Official service URL

Source URLs

  1. Initial disclosure, October 9https://skyticket.jp/news/maintenance/67603/Service and operation documentation
  2. Dedicated contact and guidance, October 13https://skyticket.jp/news/maintenance/67625Service and operation documentation

skyticket bus bookings

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Reported an October 1 fix for unauthenticated access affecting about 12,000 bookings; booking counts are not passenger counts.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Report unexpected booking changes or cancellations to the official contact.

Official service URL

Source URLs

  1. Initial disclosure, October 9https://skyticket.jp/news/maintenance/67603/Service and operation documentation
  2. Dedicated contact and guidance, October 13https://skyticket.jp/news/maintenance/67625Service and operation documentation

skyticket Premium

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The second report disclosed card data for up to 6,140 people paying fees during February 2017–June 2018, plus Benefit Station benefit-access credentials.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Review October-onward statements for the relevant cards and contact the issuer about unknown charges. Change current benefit-service and reused passwords.

Official service URL

Source URLs

  1. Card-data correction and second report, October 16https://skyticket.jp/news/world/67630/Service and operation documentation
  2. Dedicated contact and guidance, October 13https://skyticket.jp/news/maintenance/67625Service and operation documentation
Related official sources
  1. Initial disclosure, October 9Official notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.
  2. Dedicated contact and guidance, October 13Official notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.
  3. Card-data correction and second report, October 16Official notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.

Comments