Ride On Express Holdings "Gin no Sara / Kamatora / Sushi Joto"
S Up to about 6,500,000 recordsUnauthorized access was detected after October 5, 2026, and on October 7, reports were received of ransomware damage to the subcontractor's server and difficulties in data extraction and recovery. The registered user information on the official website and app may include up to approximately 6,500,000 records, with the possibility of leakage of names, addresses, contact information, dates of birth, and hashed passwords. The facts and extent of the leakage are uncertain, and credit card information is not held, thus excluded.
S About 3,136,000 recordsOn October 11, 2026, unauthorized access by a third party was confirmed in the disaster information distribution service. On October 13, it was announced that contact data, responsible personnel, and contractor information may have been leaked. The intrusion route was blocked around 3:00 AM on the 12th, and the scope of the impact is under investigation. About 3,136,000 records may have been leaked in the largest category.
Unauthorized access & data leakPossibleOfficial statement
A 129,659 peopleThe official FAQ regarding the personal information leak incident explained that part of the credit card number for deposits was leaked. It stated that the remaining information necessary for payment is not held by IDARE and has not been leaked. According to news reports, the personal information of 129,659 people was leaked.
Unauthorized access & data leakConfirmedOfficial statement
B 61,319 peopleChiba City announced the possibility that registration information for the email distribution service was leaked due to unauthorized access to the infrastructure provided by Arcadia. There has not been an announcement confirming the actual number of leaked records. According to news reports, the registrants covered number 61,319.
NEXT STAGE (Qualiz, ACRO5 and internal business intelligence systems)
B Up to about 40,000 recordsUnauthorized use of an account for the Metabase business intelligence tool was confirmed. The company reported that service databases could have been queried between September 22 and October 9, 2026. Information concerning up to approximately 40,000 business contacts and other individuals may have been exposed. Actual extraction of the data and secondary damage had not been confirmed.
Unauthorized access & data leakPossibleOfficial statement
B About 26,900 peopleUnauthorized access affecting the provider of the Toipo app used by JR Kyushu Food Service resulted in the reported exposure of some customer information. Approximately 26,900 of the app's roughly 61,500 registered members were within the potentially affected population. This does not establish that information belonging to every potentially affected member was obtained.
B 11,587 recordsThe company published the final investigation findings concerning a ransomware infection on August 10, 2026. Some or all of 125 employee records and 11,587 business partner contact records may have been exposed. No conclusive evidence of external data transmission, confirmed information leakage or secondary damage was identified.
C About 9,600 peopleUnauthorized access to the distribution operator Arcadia may have resulted in the leakage of email addresses registered for disaster information emails and road flooding information emails. It was announced that the information leakage of individual users has not been confirmed. According to news reports, the affected data covers email addresses of about 9,600 residents and names, email addresses and other details of about 2,200 city employees.
C Up to 1,844 recordsGolf Digest Online disclosed on October 16 that an October 13 intrusion led to confirmed external exfiltration of 1,789 records containing names and work email addresses of current or former employees, contractors and partners. Separately, attackers may have queried 55 customer-related records: 51 identifiers alone and four possibly containing names, addresses or other identifying information. The count field's maximum 1,844 records is a conservative calculated upper bound across the two distinct record categories (1,789 confirmed exfiltrated plus 55 potentially viewed), not a verified count of 1,844 leaked individuals. The company had not found password or payment card leakage and reported the incident to the privacy authority.
Unauthorized access & data leakConfirmedOfficial statement
C Up to 1,169 peopleUnirita reported that unauthorized access occurred at its contractor Commune, resulting in a partial leak of member information from the Oshigoto Kaikaku Labo online community. This incident is separate from unauthorized access to the company's internal document management system. Up to 1,169 people may have been affected.
D 308 peopleOn October 2, 2026, unauthorized access by a third party was confirmed. The investigation results on October 13 revealed that the birth dates and genders of 308 users were accessible from outside. One user's email address was actually obtained illegally, but the viewing and acquisition of the email addresses of the other 307 users was denied.
Unauthorized access & data leakConfirmedOfficial statement
