Free diagnosis

Incidents on Oct 17, 2026

Publication date: Dates are source publication dates (JST), not occurrence dates.

Details and evidence links

Filter incidents

Showing 11 of 11 incidents

Incidents on Oct 17, 2026
DateTargetSummaryClassificationSource links
LEAK-308Joshin "internal network"S Up to 6,230,000 recordsOn October 16, 2026, unauthorized access by a third party to the internal network was confirmed, leading to the suspension of some services due to measures such as external access restrictions. An investigation into the cause and extent of the impact is ongoing with external experts. The presence of any data leaks, including personal information, has not been confirmed, and no count of leaks has been disclosed. According to news reports, a follow-up on October 26 said customer information of up to 6,230,000 records may have been leaked.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-428Smartcamp "Studio inquiry and campaign forms"C 9,132 records9,132 submissions from November 26, 2018 through October 14, 2026 to Smartcamp inquiry and campaign forms may have been exposed. Email addresses and some names and business information were involved; BOXIL membership data was excluded and extraction unconfirmed.
Supply chainPossibleOfficial statement
LEAK-287OpenStreet corporate website inquiry formC 1,734 recordsOpenStreet disclosed that personal information submitted to its corporate website inquiry form since the site began using Studio in April 2026 may have been exposed. There is no confirmed exfiltration, and the scope remains under investigation. The forms held a provisional total of 1,734 stored responses, not a confirmed leak count.
Unauthorized access & data leakPossibleOfficial statement
LEAK-307Smartround "website inquiry and SOC 2 report disclosure forms"C 1,371 recordsUnauthorized access to the web production service Studio may have led to the external leakage of 1,371 records of form submission information from Smart Round's official website, affecting approximately 1,050 people. The information potentially included names, email addresses, phone numbers, company and department, job titles, and inquiry details. The actual acquisition remains unconfirmed, and data related to the SaaS smartround registration and management, as well as customer information from subsidiary securities, were not affected.
Unauthorized access & data leakPossibleOfficial statement
LEAK-277Tosa City (119RAIDEN and NET119)D Up to 680 peopleTosa City reported possible exposure of personal information following unauthorized access to service provider Arcadia, not a separate intrusion into the city. Up to 380 people associated with the fire department, relevant city offices and volunteer fire brigade were affected in 119RAIDEN (names, email addresses and phone numbers for fire brigade members). NET119 covers up to 300 registered users and family members in Kochi Prefecture (names, dates of birth, gender, postal addresses, email addresses and phone numbers). The combined maximum of 680 is a simple sum of two upper bounds, not a deduplicated number of people or confirmed leaked records. Whether data was actually exfiltrated remains under investigation.
Unauthorized access & data leakPossibleOfficial statement
LEAK-311Tohoku Electric Power Frontier "Studio event site forms"D A cumulative total of 182 recordsUnauthorized access to the web production service Studio may have resulted in the leakage of a cumulative total of 182 records from the inquiry forms of 5 event-related sites. The information potentially leaked includes company names, names, email addresses, phone numbers, and inquiry details. Actual information acquisition remains unconfirmed. Customer information related to electricity and optical line contracts, as well as event participant information, is excluded.
Unauthorized access & data leakPossibleOfficial statement
LEAK-286STATION Ai web formsSTATION Ai reported possible exposure of submissions to SKIP Focus, Physical AI and pre-opening inquiry forms, along with external service credentials, following the Studio security incident. Affected counts and actual extraction have not been confirmed.
Unauthorized access & data leakPossibleOfficial statement
LEAK-294GEO (GEO Online services)GEO confirmed unauthorized access to its systems on October 15, 2026 and announced on October 17 that multiple online commerce, buying and rental services would be suspended from 9 p.m. that day for containment. The company did not disclose any confirmed personal-data leakage, types of affected information or number of affected people.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-296MAPPA EXPO "CONTACT form"On October 16, it was reported that a third party had unauthorized access to the cloud environment of Studio used for operating the MAPPA EXPO official website. There is a possibility that names, email addresses, and inquiry contents received through the CONTACT form from June 19 to October 15 were leaked externally. The actual acquisition and number of affected records have not been confirmed, and no impact on the MAPPA official website and online shop has been identified.
Unauthorized access & data leakPossibleOfficial statement
LEAK-309Ishikawa Computer Center "customer support site"On October 16, 2026, unauthorized access by a third party to the customer support site was confirmed. The site was taken offline and the server was shut down while investigating the intrusion route, cause, and extent of the impact. The presence of personal information leakage and the number of affected individuals have not been disclosed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-310DIGYM (Digisupport)Unauthorized access was detected on the cloud-based membership management system DIGYM site, and access to all related sites was temporarily blocked to ensure safety. It was announced that there is a possibility of personal information leakage, and the cause, impact scope, and number of records are under investigation.
Unauthorized access & data leakPossibleOfficial statement
Incidents on Oct 17, 2026