Free diagnosis

Incidents on Oct 21, 2026

Publication date: Dates are source publication dates (JST), not occurrence dates.

Details and evidence links

Filter incidents

Showing 59 of 59 incidents

Incidents on Oct 21, 2026
DateTargetSummaryClassificationSource links
LEAK-575Chiyoda CityS 4,454,097 recordsChiyoda City reported unauthorized access to the hometown tax portal "Furusato Choice," operated by Trust Bank Co., Ltd., which resulted in the external leakage of member information. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-577Kimitsu CityS 4,454,097 recordsUnauthorized access occurred on the hometown tax portal site "Furusato Choice," resulting in the leakage of member information. The leaked information included names, email addresses, addresses, phone numbers, and hashed passwords, totaling 4,454,097 records. The service is currently suspended.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-578Nakagawa CityS 4,454,097 recordsUnauthorized access to the hometown tax portal "Furusato Choice" resulted in the leakage of personal information of registered donors. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Currently, related services are suspended.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-579Kizuki CityS 4,454,097 recordsDue to unauthorized access to the hometown tax portal "Furusato Choice", personal information of registered donors was leaked externally. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, and hashed passwords. Currently, related services are suspended.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-580Hashimoto CityS 4,454,097 recordsTrust Bank Co., Ltd., which operates the hometown tax portal site "Furusato Choice," announced that some member information managed by the company was leaked externally due to unauthorized access by a third party. The leaked information confirmed includes 4,454,097 records of member information, which consists of names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-581Shimonoseki CityS 4,454,097 recordsShimonoseki City announced that personal information of members was leaked from the hometown tax portal site "Furusato Choice". The number of leaked records is 4,454,097 records, and the information includes names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. The service is currently suspended.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-582Itoman CityS 4,454,097 recordsUnauthorized access occurred on the hometown tax portal site "Furusato Choice," confirming the leakage of personal information. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-583Osaka CityS 4,454,097 recordsTrust Bank Co., Ltd., which operates the hometown tax portal site "Furusato Choice," suffered unauthorized access, resulting in the leakage of some member registration information. The leaked information included names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts, totaling 4,454,097 records. The impact on the personal information of donors to Osaka City is under investigation.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-584Awaji CityS 4,454,097 recordsA third-party unauthorized access incident was reported by Trust Bank Co., Ltd., which operates the hometown tax portal site "Furusato Choice." The incident resulted in the external leakage of member information managed by the company. The confirmed leaked information includes 4,454,097 records of personal information, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-586Uda CityS 4,454,097 recordsThe personal information of registered members was leaked due to unauthorized access from Trust Bank Co., Ltd., which operates the hometown tax portal site "Furusato Choice." The number of leaked records is 4,454,097 records, and the leaked information includes names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. The city is currently verifying the impact of this incident.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-587Kano CityS 4,454,097 recordsTrust Bank Co., Ltd., which operates the hometown tax donation site "Furusato Choice," announced that it suffered unauthorized access on October 17, 2026, resulting in the leakage of member information. The leaked information includes 4,454,097 records containing names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. The scope of the impact is currently being assessed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-588Nakama CityS 4,454,097 recordsNakama City announced that personal information of members was leaked from the hometown tax portal site "Furusato Choice". The number of leaked records is 4,454,097, and the information items include names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Currently, related services have been suspended.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-669Hashima CityS 4,454,097 recordsUnauthorized access to the hometown tax portal "Furusato Choice" resulted in the leakage of personal information of registered donors. A total of 4,454,097 records were leaked, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Currently, related services are suspended.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-670Kagoshima CityS 4,454,097 recordsUnauthorized access to the hometown tax portal site "Furusato Choice" resulted in the leakage of personal information of registered donors. A total of 4,454,097 records were leaked, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-736Fukuoka PrefectureS 4,454,097 recordsUnauthorized access occurred on the hometown tax portal site "Furusato Choice," confirming the leakage of 4,454,097 records of personal information. The leaked information includes names, email addresses, addresses, phone numbers, and hashed passwords.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-756Asakuchi CityS 4,454,097 recordsUnauthorized access occurred on the hometown tax portal "Furusato Choice" operated by Trust Bank Co., Ltd., resulting in the leakage of some member information. The leaked information includes names, email addresses, addresses, phone numbers, and hashed passwords, totaling 4,454,097 records. The service is currently suspended, and the extent of the impact is under investigation.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-761Mitoyo CityS 4,454,097 recordsUnauthorized access occurred on the hometown tax site "Furusato Choice," resulting in the leakage of 4,454,097 records of member information. The leaked information includes names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Users are advised to be cautious of suspicious emails and SMS messages.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-779Urasoe CityS 4,454,097 recordsIt was announced that personal information of members was leaked externally due to unauthorized access to the hometown tax site "Furusato Choice." The confirmed leaked personal information includes names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts, totaling 4,454,097 records.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-800Yachiyo CityS 4,454,097 recordsYachiyo City confirmed that personal information of registered members was leaked due to unauthorized access by a third party on the hometown tax portal site "Furusato Choice". The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Related services are currently suspended.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-822Asahi CityS 4,454,097 recordsOn October 21, 2026, it was announced that 4,454,097 records of donor personal information were leaked due to unauthorized access on the hometown tax portal site "Furusato Choice". The leaked information included names, email addresses, addresses, phone numbers, and hashed passwords.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-400Future Shop "futureshop core service servers"S 3,147,469 recordsFuture Shop confirmed on October 23, 2026 that an attacker exfiltrated 3,147,469 customer membership records from one online store using the futureshop SaaS platform. The attacker exploited a software flaw on its servers at 23:02 JST on October 17 and obtained the store's member data at 00:16 JST on October 18. The affected record types include membership IDs, names, email addresses, home addresses, dates of birth, telephone numbers, gender, newsletter preferences and password hashes. The 3,147,469 figure is a record count, not necessarily distinct individuals. Payment card data was not exposed. No confirmed subsequent misuse or similar unauthorized access to other stores was reported as of October 23. This update relates to the existing core futureshop incident and is distinct from the earlier IDCF Cloud email-delivery issue LEAK-175. The exploited CVE was not named.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-500Okinawa Tourist Service "OTS Rent-a-Car, OTS HOTEL, OTS ACTIVITIES, Digital DMO Platform and OTS Club"A Up to about 730,000 peopleOkinawa Tourist Service Co., Ltd. stated in its second report on October 23, 2026 that an investigation prompted by an outside inquiry matched information said to have been leaked externally against its customer data and confirmed a personal information leak (the first report was on October 21). External access to the affected site was blocked from October 18, and new reservations for OTS Rent-a-Car, OTS HOTEL, OTS ACTIVITIES, the Digital DMO Platform and OTS Club were suspended from 16:30 on October 20. The information that may have been leaked covers up to about 730,000 people: names, dates of birth, gender, addresses, phone numbers, email addresses, Facebook IDs and driver's licence numbers, issue dates and expiry dates (Japanese licences only). Up to 6,000 driver's licence images stored in a separate database are still under investigation. Credit card information is not held on the affected system and no leak has been confirmed. The cause is not stated. The company has reported to the police and the Personal Information Protection Commission.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-444OTOTOY music distribution serviceA Up to about 480,000 recordsOn October 21, OTOTOY disclosed unauthorized access to its music distribution service. Suspicious access started on October 18; the operator noticed it on October 19, suspended the service and restored access on October 20. Up to approximately 480,000 member-information records, including internal user IDs, email addresses and registration timestamps, may have been viewed or obtained. Investigation continues. The company found no evidence of access to hashed passwords, purchase records, shipping addresses or payment data. The maximum record count is not a confirmed exfiltration count or a deduplicated number of affected people.
Unauthorized access & data leakPossibleOfficial statement
LEAK-481Osaka UniversityB 77,851 peopleOsaka University received a report from its contractor NEC that on September 26, 2026, a third party downloaded files containing personal information from the university. The number of individuals affected by the leaked personal information is 77,851 people, with the main information including names, Osaka University personal IDs, email addresses, student or employee numbers, and affiliation information. Currently, no unauthorized use or secondary damage has been confirmed, but caution has been advised.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-395PingCAP "internal systems"B Up to about 50,000 recordsFrom September 9 to October 7, US time, stolen credentials were used to access internal systems and copy data, exposing up to approximately 50,000 records of personal information in Japan. PingCAP identified the incident on October 7 and began disabling affected credentials. Unauthorized access to TiDB Cloud and disclosure of payment card information were not confirmed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-408Payke "Studio-hosted corporate website forms"C A cumulative total of 1,331 recordsPayke disclosed possible exposure of 1,331 cumulative form submissions from December 8, 2025 to October 14, 2026 following unauthorized access to Studio. The forms include inquiries, demo requests and downloads with names, company details and contact information. This is not a count of unique people. Actual acquisition and secondary misuse are not confirmed.
Supply chainPossibleOfficial statement
LEAK-409Nagoya City "Studio application form for smoking cessation program"D 886 recordsNagoya City disclosed possible exposure of 886 applications submitted from July 14, 2025 to August 31, 2026 through a contractor's Studio-hosted smoking cessation form. The data includes contact details and sensitive health history, medication use and clinic visits. All 886 applicants were notified. Actual third-party acquisition has not been confirmed.
Supply chainPossibleOfficial statement
LEAK-458Sally Uzu inquiry management systemD 544 peopleSally disclosed on October 21 that a third party misused a company email account on October 14 to impersonate an employee and enter the inquiry management system for its Uzu app. Contact details, inquiry text, user IDs and attachments from 544 people who contacted Uzu between March 30 and October 14 may have been exposed. The company reported no known public disclosure or misuse. This is a distinct compromise from the Studio-hosted website-form incident, and registered app contact details, in-app messages and payment-card data are excluded.
Unauthorized access & data leakPossibleOfficial statement
LEAK-459Sally legacy corporate website Studio inquiry formsD 404 peopleSally's October 21 notice identifies possible exposure of inquiry submissions from 404 people to its former corporate website through Studio, following an upstream cloud intrusion on September 30 and October 1. The potentially affected fields include names, email addresses and inquiry text, with organization, department, role and phone number on some forms. Actual exfiltration or misuse has not been confirmed. Sally's current website no longer uses Studio. This is separate from its Uzu employee-impersonation incident.
Supply chainPossibleOfficial statement
LEAK-413Shunan City "fan-club email newsletter"D 302 recordsShunan City reported that 302 registered fan-club newsletter entries may have been exposed following the upstream blastmail incident. Potential fields include names, addresses, telephone numbers and email addresses. The 302 figure is the number of known registrations, not a confirmed number of extracted records or affected individuals. This is the city's affected data set within the same provider breach.
Supply chainPossibleOfficial statement
LEAK-402Aomori Prefecture "outsourced fiscal 2025 event registrations"D 206 recordsOn October 21 Aomori Prefecture disclosed that 206 participant registrations for an outsourced fiscal 2025 community event may have been exposed through the contractor Daily Tohoku's use of Studio. Actual acquisition by a third party was unconfirmed. The 206 figure counts applications, not confirmed affected individuals.
Supply chainPossibleOfficial statement
LEAK-427Shimotsuma City "Nigiwai Plaza and Sanuma inquiry forms"E 78 records78 records stored in the city-managed Nigiwai Plaza and Sanuma inquiry forms may have been exposed, potentially including names and contact details. Actual acquisition of those 78 records and secondary misuse were not confirmed; indexed city text was reviewed.
Supply chainPossibleOfficial statement
LEAK-394Edogawa Ward "Agricultural Landscape Contest (painting category) application form"F 6 peopleUnauthorized access to Studio, used for an outsourced contest application form, may have exposed personal information concerning 6 people, including names, birth dates, postal addresses, email addresses and phone numbers. The ward contacted those affected. Actual acquisition by a third party has not been confirmed.
Supply chainPossibleOfficial statement
LEAK-697Iwai Cosmo SecuritiesF 5 recordsUnauthorized access occurred at Iwai Cosmo Securities, resulting in unintended trade orders being placed through a contractor, with 5 records executed on 5 accounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-576Susaki CityF 3 recordsSusaki City announced that there was unauthorized access to the cloud environment of its website "Fishing Town SUSAKI," which may have resulted in the leakage of personal information. The confirmed number of leaked records is 3 records, including names, email addresses, and phone numbers.
Unauthorized access & data leakPossibleOfficial statement
LEAK-393GMO Internet "Onamae.com Desktop Cloud"GMO Internet confirmed unauthorized access and malicious programs on some Onamae.com Desktop Cloud customer servers on October 20, 2026. Its official third report, issued October 23 at 16:10 JST, warned that saved securities and FX trading credentials (including MT4/MT5) may have been obtained and misused; users reported unauthorized trading-account actions. Up to 26,739 servers were potentially in scope, but this is a server count, not a confirmed number of compromised systems, leaked personal records or affected individuals, so the incident count remains unreported. All plans remained suspended. Users were urged to change credentials from another device, terminate all existing trading sessions with providers, enable MFA and review trading history. Password changes alone may not terminate persistent sessions. The fourth official update as of 11:50 on October 24 explicitly confirmed that customer information had been exfiltrated, announced that the compromised platform will be rebuilt rather than restarted, a flat 5,000 yen goodwill payment to all current users, and a policy of compensating realized losses from trades it attributes to the unauthorized access. The company says it has received monetary demands and threats from the apparent attacker and will not comply.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-401AEON Group "selected websites"AEON detected unauthorized access to some group websites and disclosed ongoing security checks, root-cause investigation and restoration on October 21. Personal-data leakage remained under investigation. The affected websites, exposure and record count were not specified; actual exfiltration was not confirmed.
Unauthorized access & data leakUnder investigationOfficial statement
LEAK-411Rakus Light Cloud "blastmail"In its October 24, 2026 update at 13:20 JST, blastmail operator Rakus Light Cloud confirmed that attackers compromised two API servers, executed commands and extracted sales-management and service database contents, including contact, billing and contract information for all customers. Additional information beyond subscriber account details, such as recipient lists, was confirmed exposed for 344 customer contracts; 344 is a number of contracts, not confirmed compromised people or recipient records. All 344 affected contract holders were individually notified. The service has been suspended since October 21. The intrusion route and total scope remain under investigation; the operator does not store credit-card numbers. This is a follow-up to the same incident, not an additional incident.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-412Kami City "registered disaster-information email"Kami City confirmed that subscriber email addresses for its registered disaster-information email service were exposed following unauthorized access to the upstream blastmail provider. The city has not published an affected record count. This is a distinct affected data set within the same upstream breach, not a separate intrusion.
Supply chainConfirmedOfficial statement
LEAK-414Japan Petroleum Exploration (JAPEX) "newsletters and event notices"Japan Petroleum Exploration (JAPEX) reported possible exposure of email addresses for its newsletters and names, affiliations and contact information used in investor and analyst event notices following the blastmail provider breach. The affected count remains under investigation. JAPEX said its own network, systems and operations were unaffected; this is a potential downstream impact of the same upstream incident.
Supply chainPossibleOfficial statement
LEAK-415Digital Arts "cloud services operating environment"Digital Arts confirmed compromised operational credentials and unauthorized cloud environment access discovered by an AI-assisted audit, with traces back to July 2025. Some customer information may have been viewed. No extraction or secondary misuse had been confirmed by noon October 21; the affected count is unpublished.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-417Sustainable Holdings "grid-scale battery storage inquiry form"information provided to a battery storage inquiry form from May 26, 2025 to October 14, 2026 may have been exposed, including names, contact details and requests. No affected count or secondary misuse was confirmed.
Supply chainPossibleOfficial statement
LEAK-418Nichias "Makibee certificate request form"certificate requests on the Makibee website may have been exposed, including company names and contact details. Actual extraction was not confirmed, and no affected count was published. The form was suspended.
Supply chainPossibleOfficial statement
LEAK-421Asset Lead "GoWeb tenancy application system"Asset Lead reported an intrusion into its upstream GoWeb tenancy application service. Stored applicant fields include names, contact details, birth dates and account passwords. Actual leakage or misuse was not confirmed, and the count was not disclosed.
Supply chainUnder investigationOfficial statement
LEAK-429Nagano Prefecture Industry Promotion Organization "digitalization support site"The prefectural digitalization support site's Studio contact information may have been exposed. Actual extraction, secondary harm and record counts were unconfirmed. Indexed original announcement text was reviewed, but live retrieval failed.
Supply chainPossibleOfficial statement
LEAK-450Railway customer environment-variable systemsOn October 21, Railway reported anomalous activity in systems holding customer environment variables. An unauthorized third party may have accessed encrypted variables and obtained decrypted contents of some of them, potentially including API keys and database or private-registry credentials. The affected customer population and actual exposure counts were still under investigation. Railway recommended all users rotate relevant secrets, review service logs and account for the temporary deployment pause.
Secret & credential exposurePossibleOfficial statement
LEAK-484Osaka Metropolitan UniversityOsaka Metropolitan University announced that its contractor NEC was subjected to a cyber attack, resulting in unauthorized access to the university's information infrastructure system. It was also confirmed that personal information and system data related to the university stored in NEC's cloud storage were leaked. NEC is currently investigating the facts and the extent of the impact, but details about the leaked information are still being confirmed.
Unauthorized access & data leakPossibleOfficial statement
LEAK-511Ai CommunicationUnauthorized access occurred in the Blastmail service, which is the distribution infrastructure for Ai Mail, leading to a service suspension. The impact includes Ai Mail customers, with a possibility of personal information leakage. Investigations are ongoing, and the timeline for service resumption is uncertain.
Unauthorized access & data leakPossibleOfficial statement
LEAK-521Kanagawa Prefectural PoliceThe Kanagawa Prefectural Police issued a warning about attacks by North Korean cyber attack groups, unauthorized remittance damage caused by fraudulent applications, and the expansion of ransomware damage. In particular, there has been an increase in unauthorized access incidents using flea market applications, prompting a call for caution.
Supply chainConfirmedOfficial statement
LEAK-522Yokohama Gender Equality Promotion CenterOn October 21, 2026, unauthorized access was confirmed to the email newsletter distribution service "Blastmail" used by the Yokohama Gender Equality Promotion Center, resulting in the leakage of registered email addresses. The leaked information only included email addresses and did not contain personal information such as names. The service is currently suspended, and the resumption date is undecided.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-568Kansai TelevisionAccording to reports from Kansai Television, there has been an increase in scam calls using leaked phone numbers, particularly concerning the spoofing technique that uses home phone numbers. Scammers impersonate trusted individuals when making calls, increasing the risk of victims being deceived. An app for tracking personal information leaks in a society with information leakage has also been introduced.
Unauthorized access & data leakPossibleOfficial statement
LEAK-569Taizo SugimuraTaizo Sugimura mentioned on a television program the possibility that Chinese AI could be misused for cyber attacks. Approximately 80 companies were targeted, and the government has begun an investigation.
Unauthorized access & data leakUnverified reportNews report
LEAK-570Tokyo Metropolitan PoliceRecently, there have been a series of incidents involving unauthorized access to businesses leading to personal information leaks, raising concerns about crimes exploiting the leaked personal information and causing anxiety among residents. The Tokyo Metropolitan Police has created digital content for residents and businesses, urging security measures to avoid falling victim to cyberattacks that could lead to personal information leaks.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-572AEONAEON announced on October 21 that it detected unauthorized access by a third party on some of its group companies' websites. They are currently working on safety confirmation, cause investigation, and recovery efforts. They are also investigating whether any personal information was leaked and plan to announce the results on their official website as soon as they are confirmed.
Unauthorized access & data leakUnverified reportNews report
LEAK-573GMOA cyber attack occurred against GMO, resulting in ransom demands and the publication of personal information. President Kumagai announced that information leading to the identification of the perpetrators had been obtained.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-585Nagaokakyo CityNagaokakyo City reported a potential data breach involving unauthorized access by a third party to the hometown tax portal site it uses, which may have resulted in the leakage of personal information. The potentially leaked information includes names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. The operating company is currently investigating the cause and confirming the extent of the impact.
Unauthorized access & data leakPossibleOfficial statement
LEAK-589Kawachinagano CityUnauthorized access occurred on the hometown tax portal "Furusato Choice" operated by Trust Bank Co., Ltd., resulting in the leakage of personal information of approximately 4,450,000 members. The leaked information may include names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. The service has been suspended, and investigations into the cause and extent of the impact are ongoing.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-755Higashimatsuyama CityUnauthorized access occurred on the hometown tax portal site "Furusato Choice," resulting in the leakage of member information. The service has been temporarily suspended, and users are advised to change their passwords.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-821Rescue Now Inc.Rescue Now Inc. announced that unauthorized access occurred in the external service "Studio," potentially leaking information entered in the imatome trial application form. The potentially leaked information includes company name, contact person's name, email address, and phone number. Currently, no secondary damage has been confirmed.
Unauthorized access & data leakConfirmedOfficial statement

Showing 20 of 59 cases