Every public data breach

44 disclosed this week · 26,355 on record

Reqrea

Disclosed May 15, 2026Unverified

Hotel check-in startup left over 1 million passports and IDs in open bucket

Japanese hotel check-in provider Reqrea left Amazon storage buckets publicly accessible, exposing more than 1 million passports, driver's licenses and verification selfies of hotel guests. The company locked them down after TechCrunch and JPCERT contacted it.

What is known

People affectedNot stated in the sources we have
DisclosedMay 15, 2026
AttackExposed data
Data exposedGovernment IDsBiometrics
SectorHospitality · JP
StatusUnverified: not yet confirmed by an official notice, a filing or the organization

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Reqrea