PHP Vulnerability Responses by Company

JR Shikoku

Companies / web services
Aliases / services
JR Shikoku / JR四国 / ＪＲ四国ツアー / 四国旅客鉄道株式会社 / 四国旅客铁道
Official website
https://www.jr-shikoku.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

JR Shikoku Tour web newsletter

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

The October 22, 2026 notice reports: Up to approximately 30,000 JR Shikoku Tour newsletter registrations potentially had names, birth dates, addresses and emails viewed or obtained through Blastmail. Exposure and scope were under investigation and newsletter delivery was unavailable. The notice does not describe exposure of all railway passengers.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Avoid suspicious email/SMS links and attachments and do not enter passwords or verification codes. The company announced notification of potentially affected users.

Official service URL

Source URLs

  1. Official operator identityhttps://www.jr-shikoku.co.jp/emc_info/assets/2026/10/22/0d2c20563ba3a1dafd421b6e36d48dad53dcd273.pdfService and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryIdentifies JR Shikoku as the operator.
  2. 2026-10-22: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.

Comments