Adventure Inc., which runs the travel booking site skyticket, filed a second report on Oct 16. It corrects its Oct 9 statement that no card data was leaked. Card details were stored on its own servers until June 2018. When it moved to a payment processor, it deleted the stored cards but missed a change-history log for 'skyticket Premium' membership fees. The attacker pulled that log on Oct 3, during the Oct 2–4 intrusion, and the company found it on Oct 15. Up to 6,140 customers who paid for Premium between Feb 2017 and June 2018 are affected. The log held card number, cardholder name and expiry (some entries only the number), but no security codes. Benefit Station member IDs, names and passwords for the Premium perk also leaked. Both data sets were encrypted, but the encryption keys were taken too. Adventure says no misuse has been seen so far. It asks affected customers to check card statements from October onward and to change their Benefit Station password and any reused passwords. ITmedia reported the Oct 9 first notice as covering about 14.67 million personal-data records.