Free diagnosis

Incidents on Oct 16, 2026

Publication date: Dates are source publication dates (JST), not occurrence dates.

Details and evidence links

Filter incidents

Showing 61 of 61 incidents

Incidents on Oct 16, 2026
DateTargetSummaryClassificationSource links
LEAK-246NTT Solmare "Comic Cmoa"S Up to about 4,200,000 recordsNTT Solmare's October 21 fourth incident report confirms exfiltration of 319 member-database records and up to approximately 4.2 million system-log records from Comic Cmoa. The database records may include email addresses, password hashes, nicknames, dates of birth and gender; log records may contain emails, nicknames, dates of birth and gender but not passwords. The log count may contain multiple records per person, and not every record has every field. The displayed count uses the largest disclosed record population, up to approximately 4.2 million log entries; the separate 319 database records are documented but not automatically added because deduplication and aggregate scope are unknown. Payment card information, purchase histories and purchased-book library data were not confirmed exposed. The entry counts records, not verified unique victims.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-270FANCL and Attenir EC member dataA 834,947 recordsUnauthorized access to the two companies’ online stores between October 3 and 10 led to confirmed exposure of member information: 393,785 records concerning 368,184 FANCL members and 441,162 records concerning 417,312 Attenir members. Exposed fields include contact details and, for some accounts, hashed secondary email passwords. Main account passwords and payment card data were not included. No secondary misuse had been confirmed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-487Fancl Corporation and AttenirA 393,785 recordsFancl Corporation and Attenir announced that some member information held by both companies was leaked due to unauthorized access from outside. The leaked information includes 393,785 records of Fancl members (368,184 people) and 441,162 records of Attenir members (417,312 people), containing email addresses, names, addresses, phone numbers, dates of birth, and genders. Currently, no unauthorized use or secondary damage has been confirmed.
Unauthorized access & data leakPossibleOfficial statement
LEAK-239Saitama City "disaster administrative wireless email"B 34,783 recordsA second report was published regarding the possibility that registration information for the disaster administrative wireless email and disaster prevention information telephone service may have leaked due to unauthorized access to Arcadia's network. It was not announced that an actual leak had been confirmed. 34,783 email addresses from the disaster radio mail service were leaked.
Supply chainPossibleOfficial statement
LEAK-279Joetsu City (Safety Email Service)B A cumulative total of 24,797 recordsJoetsu City reported possible exposure of registered user data in its safety-email service following unauthorized access to provider Arcadia. Data potentially involved includes residents’ email addresses, fire brigade members’ names and contact details, and municipal employees’ names, staff identifiers and departments. The number of affected people and actual exfiltration were not confirmed. According to news reports, the registrations at risk total 24,797 entries.
Unauthorized access & data leakPossibleOfficial statement
LEAK-281Luup website formsB 21,368 recordsUnauthorized access to Studio may have exposed 21,368 submissions to historical Luup web forms, including names, contact information, addresses and employer details. This is a count of submissions including repeat submissions, not unique persons. LUUP app registration data is not affected, and actual exfiltration has not been confirmed.
Unauthorized access & data leakPossibleOfficial statement
LEAK-282Link-U Group corporate websitesC 7,663 recordsLink-U Group disclosed that 7,663 personal-information records submitted through corporate website inquiry forms might have been exposed following unauthorized access to Studio. The reported scope is its corporate sites and those of consolidated subsidiaries, with no reported effect on its services.
Unauthorized access & data leakPossibleOfficial statement
LEAK-275Raksul (STUDIO forms)C 6,412 recordsA compromise of the third-party STUDIO cloud may have exposed 6,412 form submissions from Raksul marketing sites, including contact and inquiry information. Actual extraction was not confirmed. The main print-commerce site’s accounts, orders and payments were not affected.
Unauthorized access & data leakPossibleOfficial statement
LEAK-283Fuller corporate and Kosen Caravan websitesC 6,029 recordsFuller reported possible exposure of 6,029 form submissions through its Japanese and English corporate websites and Kosen Caravan website following the Studio incident. The total comprises 5,948, 20 and 61 submissions respectively, potentially including names, contacts, affiliations and inquiry contents.
Unauthorized access & data leakPossibleOfficial statement
LEAK-295Japan Arts "employee Google account"C 5,376 recordsOn October 13, an employee entered authentication information at a phishing email's destination and allowed device authentication, enabling the attacker to download the contact data from the employee's Google account. A leak of 5,376 records, including names and email addresses, was confirmed. On the 14th, suspicious emails impersonating the employee were sent internally and externally. No leaks of card information or ticket membership information were confirmed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-274Iwai Cosmo SecuritiesC 4,975 peopleThe October 20 second notice revised the number of customers affected by unauthorized access to outsourced system operator Trade Works from 4,611 to 4,975, an increase of 364. Names and email addresses were affected, but trading PINs were not. The October 14 attack also caused unauthorized orders in seven accounts, five of which were executed; the trades were reversed. These were not made using leaked personal data.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-390SimpleForm "corporate website inquiry form"C 3,404 recordsThe company disclosed that unauthorized access to Studio may have enabled viewing or acquisition of 3,404 records submitted through its corporate website inquiry form. Its services, including SimpleCheck, were not affected. Actual acquisition by a third party had not been established.
Supply chainPossibleOfficial statement
LEAK-399Nagaoka University of TechnologyC 3,113 peopleNagaoka University of Technology announced the possibility of personal information leakage by a contractor. An employee's email account at a subcontractor was misused, and files containing health check information may have been accessed by a third party. The affected data includes student information from health checks conducted between 2024 and 2026, including names and birth dates. The number of individuals potentially affected is 3,113 people.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-343Shibayama Town "email information distribution service"C 1,277 peopleUnauthorized access to contractor Arcadia's SpeeCAN RAIDEN may have exposed email addresses for 1,277 people registered for resident notifications, and names and email addresses for 151 people registered for staff notifications. These figures concern different registration categories and should not simply be added together.
Supply chainPossibleOfficial statement
LEAK-345Kiho Town "disaster prevention radio email notifications"D 927 recordsUnauthorized access to SpeeCAN RAIDEN, operated by contractor Arcadia, may have exposed 927 records of email addresses registered for disaster prevention radio email notifications. Actual extraction or misuse had not been confirmed, and the scope remained under investigation.
Supply chainPossibleOfficial statement
LEAK-284Fukuoka Growth Next website formsD 629 recordsFukuoka Growth Next reported potential exposure of 629 submissions across six form types, including inquiries, coworking or startup cafe applications and entrepreneurship programmes, following unauthorized access to Studio. Submitted names, contact and business details may be affected.
Unauthorized access & data leakPossibleOfficial statement
LEAK-299Zero-Ten Park website formsD 530 peopleAfter unauthorized access to Studio's cloud service, information submitted by 530 people through Zero-Ten Park's contact and recruitment forms may have been exposed. Fields include names, emails, telephone numbers, companies and form content. Resume attachment contents were not in scope; actual exfiltration and misuse were not confirmed.
Unauthorized access & data leakPossibleOfficial statement
LEAK-273AstemoD About 350 peopleA contractor employee account was compromised and used to access Astemo’s shared cloud. Data containing business contact information of approximately 350 employees and partner personnel was confirmed exposed. Customer and consumer personal information was not identified; the investigation continues.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-342Mima City "disaster prevention information distribution system"D 328 peopleUnauthorized access to contractor Arcadia may have exposed names, telephone numbers, fax numbers and email addresses relating to 328 people registered for disaster information notifications by telephone, fax and email. Actual leakage had not been established. The notification service resumed at 11 a.m. on October 16.
Supply chainPossibleOfficial statement
LEAK-290Yokohama Nishi Ward (emergency alert system)D About 300 peopleYokohama Nishi Ward reported potential exposure of subscriber information from its emergency alert service after unauthorized access at provider Arcadia. The service has been suspended since October 13, 2026. According to materials Yokohama City released on October 14, about 300 people in Nishi Ward may have had their data leaked.
Unauthorized access & data leakPossibleOfficial statement
LEAK-272Saitama Midori-no-Mori MuseumD 162 recordsUnauthorized access to the Studio cloud platform may have exposed 162 records collected through event registration and contact forms at the museum. The existence and scope of any leak remained under investigation, and no misuse was confirmed. The platform provider is shared with other reports, but the affected organisation and records are distinct.
Unauthorized access & data leakPossibleOfficial statement
LEAK-300Kanda Town Fire Department NET119 and 119RAIDEND 161 peopleUnauthorized access to provider Arcadia may have exposed data for 20 NET119 registrants and 141 119RAIDEN registrants at Kanda Town Fire Department. Information includes names and contact details, with birth dates, addresses and fax numbers for NET119. The combined 161 registrations are not a deduplicated headcount; no actual exfiltration or misuse was confirmed.
Unauthorized access & data leakPossibleOfficial statement
LEAK-347Hamura City "fire brigade mobilization email notification system"D About 100 peopleUnauthorized access to contractor Arcadia's 119RAIDEN may have exposed names, telephone numbers, email addresses and notification-history contents concerning approximately 100 people, including volunteer firefighters. The scope remained under investigation. Hamura City's email notification service for residents used a separate system.
Supply chainPossibleOfficial statement
LEAK-255Hokuto Kotsu "Hassha Oralai Net Reservation"E About 90 peopleUnauthorized access to the reservation management platform was announced, indicating that the reservation information of approximately 90 people may have been leaked. The information includes names of the reservers, contact details, and boarding information, while card and account information were not included in the affected server.
Supply chainPossibleOfficial statement
LEAK-377Itoigawa City "Watashi no Ito / Aete, Itoigawa"E 89 recordsUnauthorized access to Studio may have exposed 30 inquiry submissions from 25 people on the relocation portal and 59 submissions from 39 people on the workation website. The two submission datasets total 89 event records, whereas the two person populations cannot be added as deduplicated affected individuals. Actual third-party acquisition had not been confirmed. Affected-count basis: Thirty relocation-portal submissions plus 59 workation-portal submissions equal 89 separate form records. The associated 25 and 39 people may overlap and must not be summed as unique victims; actual third-party extraction is unconfirmed.
Supply chainPossibleOfficial statement
LEAK-249Ryobi Holdings "Ryobi Bus"E 52 recordsRyobi Holdings announced that although it does not accept reservations through the Hassha Oraline Net, there is a possibility that reservation information of users of its own services may also be included in the leak due to the use by a partner operating company. The affected reservation records were disclosed by route; the largest, the Okayama-Kochi route, had 52 records.
Supply chainPossibleOfficial statement
LEAK-289Recamp Hack no Kakurega websiteE 45 recordsRecamp disclosed possible exposure of personal information held through the website for its Hack no Kakurega facility after unauthorized access to Studio, the website platform. The extent of potential exposure remains under investigation. About 45 records may have been leaked.
Unauthorized access & data leakPossibleOfficial statement
LEAK-358Komatsushima City Fire Department "NET119 emergency call system"E 43 peopleUnauthorized access to NET119 operated by a contractor may have exposed names, dates of birth, addresses, email addresses and other information concerning 43 people, including 11 fire department employees. The service remained available as normal. Whether leakage occurred and its scope remained under investigation.
Supply chainPossibleOfficial statement
LEAK-285Minaminihon Broadcasting event formsE 38 recordsMinaminihon Broadcasting reported potential exposure of 38 event and programme form submissions (29, 5, 2 and 2) following unauthorized access to Studio. Data could include names, email addresses, telephone numbers and messages; no secondary misuse had been identified.
Unauthorized access & data leakPossibleOfficial statement
LEAK-271Kyoto City commissioned cultural programmesE 33 recordsUnauthorized access to the Studio cloud service may have exposed 30 inquiry submissions for the Art x Business programme and three submissions for the Kyoto Traditional Culture Experience programme. Names, contact details and inquiry contents were potentially affected. Actual exfiltration had not been confirmed.
Unauthorized access & data leakPossibleOfficial statement
LEAK-380Eniwa City Fire Department "NET119 emergency call system"E 23 peopleUnauthorized access to the contracted operator Arcadia may have exposed registration information concerning 23 people registered for NET119 and 12 people listed as emergency contacts. These figures describe the potentially affected population, not the number of people whose information was confirmed acquired.
Supply chainPossibleOfficial statement
LEAK-365Inzai City "emergency disaster information notifications by telephone and fax"E 21 recordsUnauthorized access to contractor Arcadia's notification system may have exposed 21 records containing subscriber names and telephone or fax numbers in Inzai City's landline and fax notification service. Service resumed on October 15, while whether leakage occurred remained under investigation. Inzai City's disaster prevention email used a separate system and was not affected.
Supply chainPossibleOfficial statement
LEAK-381Shima City Fire Department "Net119 emergency call system"E 20 recordsUnauthorized access to contractor Arcadia's servers may have exposed 20 records: 10 records for Net119 registrants and 10 for emergency contacts. These are not confirmed counts of acquired information or actual victims.
Supply chainPossibleOfficial statement
LEAK-357Alpico Hotels "graduate recruitment website"E 17 recordsUnauthorized access to Studio may have made information in 14 inquiry form submissions and 3 job application form submissions on the graduate recruitment website available for external acquisition. The figures refer to different forms. Actual acquisition had not been confirmed. Affected-count basis: Fourteen inquiry submissions and three job applications are 17 distinct form-submission records in aggregate. This is the potentially exposed submitted-record population, not 17 confirmed exfiltrated records or verified unique persons.
Supply chainPossibleOfficial statement
LEAK-291Kagoshima City (digital event inquiry site)F 5 recordsKagoshima City disclosed potential exposure of five inquiry form submissions containing names and email addresses after unauthorized access to its subcontractor Studio. Exfiltration and secondary misuse were not confirmed.
Unauthorized access & data leakPossibleOfficial statement
LEAK-244StudioStudio reported that a vulnerability enabled unauthorized access to its cloud environment, exposing account details (including hashed passwords), form submissions, CMS and design data and integration credentials to possible retrieval. Attacks were observed September 30 to October 1 and mitigated October 13 to 14. Actual acquisition and secondary harm remained unconfirmed at disclosure.
Unauthorized access & data leakPossibleOfficial statement
LEAK-245Wasabi "WASABI SWITCH"On October 14, unauthorized access confirmed external leakage of order information from stores. Suspicious emails using actual order information for refund purposes have been reported. On October 16, another unauthorized access due to a different cause was confirmed, and the scope of the impact is being investigated.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-248Keisei Electric Railway Bus Group "Keisei Bus Chiba Central / Keisei Bus Chiba East"The group announced that it received a report of a partial leak of reservation information due to unauthorized access from the operator of the Departure Orai Net used for ticketing by the two companies. The impact on its own users and the number of affected individuals have not been confirmed at this time.
Supply chainPossibleOfficial statement
LEAK-250Tango Kairiku Kotsu "highway bus reservation"Unauthorized access to the operating company of the reservation platform Hashira Orai Net revealed that some reservation information had leaked. They have informed users of the impact, but the confirmed number of affected users from their own company has not been determined this time.
Supply chainPossibleOfficial statement
LEAK-251Hankyu Kanko Bus "highway bus reservation"Unauthorized access to the operating company of Hassha Oraline Net resulted in the partial leakage of information from users who made reservations. The number of incidents confirmed for their own company has not been determined. The announcement integrated notifications for both highway buses and airport limousines.
Supply chainPossibleOfficial statement
LEAK-252Nishi-Nippon JR Bus "Highway Bus Reservation"It was announced that reservation information was leaked due to unauthorized access to the Departure Orai Net used for booking some routes. The affected information may include the names, contact details, and boarding information of the reservers.
Supply chainPossibleOfficial statement
LEAK-254Alpico Kotsu "Hassha Oralai Net Reservation"Alpico Kotsu announced that unauthorized access to the API server for external partner collaboration of the reservation platform resulted in the leakage of some users' reservation information. There is a possibility that the names, contact information, and boarding details of the reservers were leaked.
Supply chainPossibleOfficial statement
LEAK-256Setouchi Transportation "Setouchi Bus"Setouchi Transportation reported unauthorized access from the operator of the departure Orai Net, leading to a potential leak of reservation information, including names, contact details, and boarding information of the reservers. They are currently confirming the extent of the impact.
Supply chainPossibleOfficial statement
LEAK-257JR Shikoku Bus "Hassha Oralai Net Reservation"Unauthorized access to the API server for coordination from the operating workshop was reported, resulting in a partial leak of reservation information. There is a possibility that the names, contact information, and boarding details of users were leaked, and specific secondary damage has not been confirmed.
Supply chainPossibleOfficial statement
LEAK-258Zenryoku Yu "Web Inquiry Form"Zenryoku Yu announced the possibility that information entered into the management website's form was leaked due to unauthorized access to the Studio being used. The Studio has not confirmed any actual acquisition by a third party.
Supply chainPossibleOfficial statement
LEAK-259Neurolework "Web inquiry form for advertising site"Unauthorized access occurred at a studio previously used for creating and operating a web advertising site, and it was announced that personal information entered in the site's form may have been leaked. The scope of the impact and response status are being investigated.
Supply chainPossibleOfficial statement
LEAK-276Sumitomo Mitsui DS Asset ManagementA third-party trading service provider detected unauthorized access. The fund direct-sales account portal was temporarily unavailable from October 15 to October 16 as a precaution and has recovered. No account or transaction impact was confirmed; no personal-data exposure has been announced.
Unauthorized access & data leakUnder investigationOfficial statement
LEAK-278Isahaya City (Roadside Station 251 Iimori Jaga Road)Isahaya City reported possible exposure of names, phonetic names, email addresses, addresses and phone numbers submitted through a roadside-station website inquiry form after unauthorized access to website provider Studio. The number of affected records was not disclosed, and secondary misuse remained under investigation.
Unauthorized access & data leakPossibleOfficial statement
LEAK-288Include advertising website formsInclude Inc. reported potential exposure of personal information submitted through forms on an advertising website previously built and operated using Studio. The affected record count and whether information was obtained remain under investigation.
Unauthorized access & data leakPossibleOfficial statement
LEAK-293Kufu Company Holdings (Studio-hosted websites)Kufu Company Holdings reported that some group companies used Studio, whose infrastructure suffered unauthorized access. The company was investigating whether any information was affected. No number of affected users or confirmed exposure was disclosed.
Unauthorized access & data leakUnder investigationOfficial statement
LEAK-341Adglobe "recruitment website inquiry form"Unauthorized access to Studio, which was used for the recruitment website, may have exposed names, school or company names, contact details, inquiry contents and other information submitted through its inquiry form. The number of records and submission periods remained under investigation. Actual acquisition by a third party had not been confirmed.
Supply chainPossibleOfficial statement
LEAK-346Musashino City "fire dispatch instruction email service"Unauthorized access to contractor Arcadia's system may have exposed names, email addresses and other information concerning volunteer firefighters, fire station personnel and disaster response staff. The service was suspended from October 14. The resident-facing Musashino Disaster Prevention and Safety Email service used a different contractor and was not affected.
Supply chainPossibleOfficial statement
LEAK-359Takamatsu Express "Footbus reservations through Hassha Orai Net"The bus company received a report from the operator that some reservation information had been exposed externally following unauthorized access to an API server connecting contractors to the Hassha Orai Net highway bus reservation service. Users' names written in katakana, telephone numbers and journey details were potentially affected. The number specific to Takamatsu Express users had not been disclosed.
Supply chainPossibleOfficial statement
LEAK-362Daisen City "hometown tax donation gift deliveries (Sagawa Express)"The city disclosed possible exposure of delivery-related information, including names, addresses and telephone numbers, for donors from late June 2026 onward following unauthorized access to Sagawa Express's parcel tracking service. Sagawa handled delivery of donation gifts. Actual leakage of Daisen donor information and the affected count had not been established.
Supply chainPossibleOfficial statement
LEAK-363Onga Town "disaster information notification service (SpeeCAN RAIDEN)"The town disclosed possible exposure of subscribers' email addresses, telephone numbers for telephone notifications and fax numbers for fax notifications following unauthorized access to service provider Arcadia. Names and addresses were not collected for registration. The extent of actual leakage remained under investigation.
Supply chainPossibleOfficial statement
LEAK-364Tonami City "municipal emergency email (SpeeCAN RAIDEN)"The city disclosed possible exposure of email addresses registered for municipal emergency notifications following unauthorized access to Arcadia, the contractor providing simultaneous disaster information distribution. The service resumed after security measures were implemented. Whether information was leaked and the affected count had not been established.
Supply chainPossibleOfficial statement
LEAK-367Albirex Niigata Ladies "official club website inquiry form"The club disclosed that unauthorized access to Studio, used for its official website, may have exposed names, email addresses, inquiry contents and other information entered in the inquiry form. The affected count and any secondary harm remained under investigation. Actual leakage had not been established.
Supply chainPossibleOfficial statement
LEAK-370Honshi Kaikyo Bus "Hassha Orai Net reservations"The bus company disclosed that unauthorized access by a third party to Kobo's Hassha Orai Net service, used for highway bus reservations on some routes, had resulted in confirmed exposure of some reservation information. The number specific to Honshi Kaikyo Bus users had not been disclosed.
Supply chainConfirmedOfficial statement
LEAK-371Shimotsui Dentetsu "Shimoden highway bus reservations"The bus company disclosed possible exposure of some highway bus reservation information after unauthorized access by a third party to an external integration API server operated by Kobo, the provider of Hassha Orai Net. The company-specific affected count and extent of actual leakage had not been established.
Supply chainPossibleOfficial statement
LEAK-378Ryukyu Shimpo "corporate website application and inquiry forms"Following unauthorized access to the website creation service Studio, the publisher disclosed possible exposure of some information entered in its corporate website application and inquiry forms and retained on Studio. It notified affected individuals separately and was investigating the scope. Actual acquisition and the number of records had not been established.
Supply chainPossibleOfficial statement
LEAK-420ConnectWise "Cloud Backup (formerly SkyKick)"ConnectWise confirmed unauthorized access to Cloud Backup application identities and credentials and suspended Cloud Backup, plus connected SaaS Security and Cloud Management as a precaution. Phased recovery began by October 21; this does not establish compromise of customer Microsoft 365 tenants or encrypted backup archives.
Unauthorized access & data leakConfirmedOfficial statement

Showing 20 of 61 cases

Incidents on Oct 16, 2026