PHP Vulnerability Responses by Company

Yamagata Kotsu Co., Ltd.

Companies / web services
Aliases / services
山交バス / Yamako Bus / Yamagata Kotsu Co., Ltd. / 山形交通株式会社
Official website
https://www.yamagatakotsu.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Bus core-system customer records

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

On April 17, 2026, Yamagata Kotsu reported 1,307 bus core-system records potentially exposed by the April 2 ransomware incident at YCC Information System. Fields included customer names, addresses, phones and employee names, including past transactions. It described individual notifications and reporting to the privacy regulator.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review individual notices and verify unfamiliar communications with Yamagata Kotsu’s official contact.

Official service URL

Source URLs

  1. 2026-04-17 Official Bus core-system customer records noticehttps://www.yamagatakotsu.jp/029aa18162f3e01f506f974529280e21f4ab6573.pdfService and operation documentation

Historical hire-car core-system records

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

The same April 17, 2026 notice identifies 120,573 historical hire-car customer records from 2002 as potentially affected: names, addresses and phone numbers. The record count includes duplicates and does not describe all current passengers as affected.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review individual notices and verify unfamiliar communications with Yamagata Kotsu’s official contact.

Official service URL

Source URLs

  1. 2026-04-17 Official Bus core-system customer records noticehttps://www.yamagatakotsu.jp/029aa18162f3e01f506f974529280e21f4ab6573.pdfService and operation documentation
Related official sources
  1. 2026-04-17 Official Bus core-system customer records noticeOfficial notice; link to this PHP incident unconfirmedConfirms scope, chronology and user guidance.

Comments