---
title: "Snow Peak event-reservation intrusion"
description: "Snow Peak identified event-reservation data leakage November 11 after unauthorized access on October 30 and November 8–9. It attributed access to a system vulnerability."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-11-14"
canonical_url: "https://www.ally.security/incidents/snow-peak-event-reservation-intrusion-2026"
markdown_url: "https://www.ally.security/incidents/snow-peak-event-reservation-intrusion-2026.md"
stix_url: "https://www.ally.security/incidents/snow-peak-event-reservation-intrusion-2026/stix.json"
---

# Snow Peak event-reservation intrusion

Snow Peak identified event-reservation data leakage November 11 after unauthorized access on October 30 and November 8–9. It attributed access to a system vulnerability.

Last modified Nov 14, 2026 · 1 source

## Summary

- **Environment:** Event-reservation system
- **Operational impact:** Temporary service suspension during security response
- **Financial impact:** No confirmed incident cost quantified

## What happened

[Snow Peak](https://www.snowpeak.co.jp/) identified event-reservation data leakage November 11 after unauthorized access on October 30 and November 8–9. It attributed access to a system vulnerability. [1](#source-1)

## Impact

The notice provisionally identifies 5,923 people with potentially exposed applicant contacts, birth dates, gender, customer identifiers, companion details and event/stay information. It did not confirm leakage of passwords or card data. [1](#source-1)

## Timeline

### October 30, 2026 — First reported reservation-system access

First reported reservation-system access. [1](#source-1)

### November 8, 2026 — Further access period begins

Further access period begins. [1](#source-1)

### November 11, 2026 — Reservation-data leakage identified

Reservation-data leakage identified. [1](#source-1)

### November 13, 2026 — Incident and response disclosed

Incident and response disclosed. [1](#source-1)

### November 14, 2026 — Briefing updated

This briefing was last reviewed and updated on November 14, 2026.

## Threat Group & Attack Vector

Snow Peak attributed this intrusion to a vulnerability but did not identify a CVE or specific exploit. [1](#source-1)

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific ATT\&CK technique is mapped from the available evidence.

## Response

Snow Peak temporarily suspended the affected services and strengthened security and monitoring. Its [November 13 notice](https://www.snowpeak.co.jp/news/p20261113-0/) planned a store restart that day, with other services awaiting security measures. It had not confirmed secondary harm. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/snow-peak-event-reservation-intrusion-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Snow Peak notice of four online-service incidents

official · Snow Peak Inc. · Nov 13, 2026

<https://www.snowpeak.co.jp/news/p20261113-0/>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Resulted In · 100% confidence · current**  
   Snow Peak event-reservation intrusion: First reported reservation-system access
2. **Resulted In · 100% confidence · current**  
   Snow Peak event-reservation intrusion: Further access period begins
3. **Occurred At · 100% confidence · current**  
   Reservation-data leakage identified: 2026-11-11
4. **Occurred At · 100% confidence · current**  
   Incident and response disclosed: 2026-11-13
5. **Disclosed At · 100% confidence · current**  
   Snow Peak event-reservation intrusion: 2026-11-13
6. **Resulted In · 100% confidence · current**  
   Snow Peak event-reservation intrusion: The notice provisionally identifies 5,923 people with potentially exposed applicant contacts, birth dates, gender, customer identifiers, companion details and event/stay information. It did not confirm leakage of passwords or card data.
7. **Occurred At · 100% confidence · current**  
   First reported reservation-system access: 2026-10-30
8. **Occurred At · 100% confidence · current**  
   Further access period begins: 2026-11-08
9. **Resulted In · 100% confidence · current**  
   Snow Peak event-reservation intrusion: Snow Peak identified event-reservation data leakage November 11 after unauthorized access on October 30 and November 8–9. It attributed access to a system vulnerability.
10. **Affected Organization · 100% confidence · current**  
   Snow Peak event-reservation intrusion: Snow Peak Inc.
11. **Resulted In · 100% confidence · current**  
   Snow Peak event-reservation intrusion: Reservation-data leakage identified
12. **Resulted In · 100% confidence · current**  
   Snow Peak event-reservation intrusion: Snow Peak temporarily stopped the affected services, strengthened security and monitoring, and was reporting to relevant authorities. On November 13 it announced a store restart planned that day; the other services awaited security measures. It had not confirmed secondary harm.
13. **Resulted In · 100% confidence · current**  
   Snow Peak event-reservation intrusion: Incident and response disclosed

</details>