On Thursday, Japan Airlines (JAL) fell victim to a cyberattack that disrupted its operations just as the New Year holiday rush began. The attack caused significant delays for both domestic and international flights, impacted luggage services, and temporarily halted ticket sales. By the afternoon, the airline was able to restore its systems, ensuring that ticket purchases resumed and no customer data was compromised.
Attack Details and Flight Delays
The cyberattack began around 7:25 a.m. when JAL’s internal and external networks malfunctioned. The airline confirmed that the attack did not threaten flight safety but did cause widespread delays. By late morning, at least 24 domestic flights were delayed by over 30 minutes. As the day continued, more than 60 flights were delayed by up to four hours, and two domestic flights were canceled.
Ticket sales were briefly suspended, but customers with existing reservations were not affected. JAL officials later revealed that the attack was likely a distributed denial-of-service (DDoS) attack, which overwhelms a network with traffic from multiple sources, causing it to crash. The airline successfully restored its systems by 2 p.m., mitigating further disruptions.
Government and Passenger Reactions
Following the disruption, Japan’s Chief Cabinet Secretary Yoshimasa Hayashi addressed the situation, urging JAL to swiftly resolve the issue and assist affected passengers. The cyberattack occurred during Japan’s busiest travel season, creating frustration for many travelers. At Tokyo’s Haneda Airport, passengers were seen anxiously checking their phones and seeking assistance from airline staff.
One passenger, a man in his 30s traveling to Ishigaki Island, expressed concern about the delay, stating, “I’ve been looking forward to this year-end trip, but it’s worrying that there’s trouble.” Another passenger in his 60s, heading to Matsuyama, called the delays “a nuisance during the busy year-end period.”
Meanwhile, Narita Airport in Chiba Prefecture experienced less visible confusion, as passengers there seemed to be unaffected by the issue.
Cybersecurity Concerns in Japan
This cyberattack has once again highlighted Japan’s vulnerability to cyber threats. Experts have long warned that Japan needs to strengthen its cybersecurity measures, especially as the country works more closely with global allies like the United States, which have more advanced protections.
In recent years, Japan has been targeted by several high-profile cyberattacks. In June, the Japan Aerospace Exploration Agency (JAXA) revealed it had faced multiple attacks, although no sensitive defense-related data was compromised. A separate attack last year disrupted operations at a major container terminal in Nagoya for three days.
Despite efforts to enhance cybersecurity, experts argue that Japan still needs to implement more robust defenses to safeguard its critical infrastructure.
Minimal Disruption for Other Airlines
While JAL faced significant disruptions, other Japanese airlines, including ANA, Skymark, and Star Flyer, were not affected by the cyberattack and continued operations without issues. However, JAL’s flight delays did cause ripple effects in other sectors, particularly Japan Post, which reported disruptions to mail and parcel deliveries due to the impacted flights.
Increased Challenges During the Holiday Rush
The timing of the attack made the situation more challenging, as it coincided with Japan’s New Year holiday, a time when millions of people travel across the country. Offices typically close during this period, leading to a surge in domestic travel. Television footage from Haneda Airport showed packed terminals as travelers dealt with the delays.
Despite the challenges, JAL’s prompt response in restoring its network minimized the impact, and most affected passengers were able to resume their travel plans by the afternoon.