Free diagnosis

Incidents on Oct 23, 2026

Publication date: Dates are source publication dates (JST), not occurrence dates.

Details and evidence links

Filter incidents

Showing 70 of 70 incidents

Incidents on Oct 23, 2026
DateTargetSummaryClassificationSource links
LEAK-489Park24 Co., Ltd.S 6,628,007 recordsPark24 Co., Ltd. announced that unauthorized access was confirmed in the web system of its consolidated subsidiary Times Mobility's car-sharing service "Times Car," resulting in a data breach of personal information. Investigations revealed traces of approximately 1,464,800 images of identity verification documents being sent externally, and it was found that 6,628,007 pieces of personal information were accessed. The company plans to implement measures to prevent recurrence and will proceed with responses to affected customers.
Unauthorized access & data leakPossibleOfficial statement
LEAK-480Green Monster FX Navi demo-trading appS About 6,190,000 recordsDisclosed October 23. No information leakage was confirmed from an unauthorized access event detected October 17. Investigators separately found that another actor may have collected FX Navi information via its API during April 27–30. Approximately 6.19 million potentially accessed information items also include non-personal survey data, not 6.19 million affected people or confirmed exfiltrated personal records. The developer fixed the API and invalidated previously issued login credentials. Investigations continue and no resulting secondary damage had been identified.
Unauthorized access & data leakPossibleOfficial statement
LEAK-615Nagasaki CityS 4,454,097 recordsUnauthorized access was confirmed on the hometown tax portal site "Furusato Choice," resulting in the leakage of personal information of registered donors. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, and hashed passwords. A detailed investigation is currently underway with the service provider.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-616Fukushima Prefecture Date CityS 4,454,097 recordsUnauthorized access occurred in the Furusato Choice service operated by Trust Bank, confirming the leakage of member information. The leaked personal information includes 4,454,097 records, consisting of names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Investigations into the cause and extent of the impact are ongoing.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-617Tochigi PrefectureS 4,454,097 recordsUnauthorized access occurred on Furusato Choice operated by Trust Bank, confirming the leakage of personal information of registered members. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-618Shiman TownS 4,454,097 recordsUnauthorized access occurred in the Furusato Choice service operated by Trust Bank, confirming the leakage of member information. A total of 4,454,097 records were leaked, including names, email addresses, addresses, phone numbers, and hashed passwords. Related services have been suspended to prevent further damage.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-619Trust Bank Co., Ltd.S 4,454,097 recordsUnauthorized access by a third party was confirmed on Furusato Choice operated by Trust Bank Co., Ltd., resulting in the leakage of personal information of registered donors. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-621Trust Bank Co., Ltd.S 4,454,097 recordsOn October 23, 2026, Trust Bank Co., Ltd., which operates the hometown tax portal site "Furusato Choice," experienced unauthorized access by a third party, resulting in the personal information of registered donors being leaked. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-622Awa CityS 4,454,097 recordsOn October 17, 2026, unauthorized access occurred at Trust Bank, which operates the hometown tax donation site "Furusato Choice," confirming the leakage of personal information of members. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Currently, the extent of the impact is being verified.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-623Mino Kamo CityS 4,454,097 recordsUnauthorized access occurred in the Furusato Choice service operated by Trust Bank Co., Ltd., confirming the leakage of 4,454,097 records of member information. The leaked information includes names, email addresses, addresses, phone numbers, and hashed passwords.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-624Makurazaki CityS 4,454,097 recordsUnauthorized access occurred on the hometown tax portal "Furusato Choice" operated by Trust Bank Co., Ltd., confirming the leakage of 4,454,097 records of personal information. The leaked information includes names, email addresses, addresses, phone numbers, and hashed passwords.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-625Iwakuni CityS 4,454,097 recordsUnauthorized access occurred in the Furusato Choice service operated by Trust Bank, confirming the leakage of member information. The leaked personal information includes 4,454,097 records, consisting of names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Related services have been suspended to prevent further damage.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-626Gojo CityS 4,454,097 recordsUnauthorized access occurred to member information on Furusato Choice, managed by Trust Bank Co., Ltd., confirming the leakage of 4,454,097 records of personal information. The leaked information includes names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Related services have been suspended to prevent further damage.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-629Sanakawachi VillageS 4,454,097 recordsThe hometown tax site "Furusato Choice" reported that personal information of registered donors was leaked due to unauthorized access by a third party. The leaked personal information includes 4,454,097 records, consisting of names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Currently, related services have been suspended, and an investigation into the cause and extent of the impact is ongoing.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-630Hanno CityS 4,454,097 recordsUnauthorized access by a third party was confirmed at Furusato Choice, operated by Trust Bank Co., Ltd., resulting in the leakage of personal information of registered members. The number of leaked records is 4,454,097 records, including names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-708Kanagawa PrefectureS 4,454,097 recordsOn October 23, 2026, it was reported that personal information of registered donors was leaked due to unauthorized access by a third party on the hometown tax portal "Furusato Choice" operated by Trust Bank. The number of leaked records was 4,454,097 records, including information such as names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-763Narashino CityS 4,454,097 recordsIt was revealed that personal information of registered donors was leaked externally due to unauthorized access by a third party to the hometown tax portal site "Furusato Choice." The leaked information includes 4,454,097 records, consisting of names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Currently, related services are temporarily suspended, and an investigation is underway.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-870Mima CityS 4,454,097 recordsMima City reported unauthorized access by a third party to the hometown tax portal "Furusato Choice" operated by Trust Bank, resulting in the leakage of some member information managed by the company. The number of leaked records is 4,454,097 records, which includes names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-461and ST HD "business servers"S About 2,500,000 recordsOn October 22, unauthorized actors accessed several business servers and extracted data. The company detected the intrusion around 10:00 JST and blocked the access route by 17:00 JST. Its October 23 disclosure identified approximately 2,500,000 customer records and 10,000 business-partner records as potentially exposed, with employee records still under review. Possible customer fields include names, dates of birth, addresses, contact details and membership IDs. Actual exfiltrated record totals and unique victim counts remain unknown. Payment information and customer-selected passwords were not included.
Unauthorized access & data leakPossibleOfficial statement
LEAK-479MOS Food Services MOS Card (outsourced operator Value Design)S 1,133,070 recordsDisclosed October 23. The outsourced MOS Card operator Value Design detected suspicious access and unauthorized-login attempts on October 14–18. The company confirmed exfiltration of 1,133,070 prepaid-card records including card numbers, six-digit PINs and balances. Approximately 570,000 cards had been distributed and 560,000 had not, so the total is not a number of affected individuals or personal identity records. Names, addresses, phone numbers and credit-card data were not included. All affected PINs were forcibly reset, and no related customer-loss inquiries had been received at disclosure.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-478Treasure Factory on-site purchasing and Trefac Moving case-management systemA 746,277 recordsDisclosed October 23. On October 20, attackers exploited a database-access vulnerability in Treasure Factory's on-site purchase and moving case-management system. Unauthorized acquisition of 746,277 customer email records was confirmed; 11 also contained names and addresses. The company separately confirmed 750 partner/employee records and 1,000 endpoint records, which must not be summed as unique individuals. No secondary harm was confirmed. October 28 is a planned reopening date, not an accomplished restoration. The vendor ruled out the recently disclosed PHP vulnerabilities and distinguished the event from its August subsidiary incident.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-467Panasonic Operational Excellence "HR records uploaded to a prohibited external generative AI service"A About 334,000 peopleOn October 23, Panasonic Operational Excellence disclosed that a team member in a joint HR-system project with Panasonic Digital uploaded personal records to an external generative AI service prohibited by company policy. The affected populations were approximately 75,000 current employees, 178,000 former employees, 55,000 family contacts of current employees and 26,000 family contacts of former employees. The approximate sum of 334,000 is derived from rounded category totals, not a verified deduplicated headcount. Employee records included employee IDs, addresses, phone numbers and email addresses, but not their names; emergency family contacts included names and contact details. The upload is confirmed, but public disclosure or malicious reuse is not. The service provider said model training was disabled and the retained data would no longer be held after the 30-day retention period ending on or after October 25. This was an internal policy violation, not an external network intrusion.
Misdelivery & accidental exposureConfirmedOfficial statement
LEAK-535Alc Co., Ltd.A About 310,000 recordsUnauthorized access occurred to the email distribution service BlastMail used by Alc Co., Ltd., confirming the leakage of approximately 310,000 email addresses. The leaked information includes email addresses and management numbers assigned to some customers, but does not include names, addresses, phone numbers, passwords, or credit card information. The operating company is currently working to confirm the facts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-462Xebio Holdings subsidiary GALLERY-2 "Commerble"A Up to about 128,000 recordsAdministration credentials for the third-party Commerble EC platform were stolen on October 16. Attackers accessed and viewed GALLERY-2 customer records on October 17, and the payment-entry page was tampered with on October 18, when the site was suspended. Potentially exposed sets comprise up to approximately 128,000 purchaser records, 122,000 address records and 158,000 email-history records. These categories overlap and must not be added together. Actual external extraction and secondary harm remain unconfirmed; card numbers and login passwords were not included. Affected-count basis: The incident's displayed count uses only the disclosed purchaser-name and email subset, up to approximately 128,000 records. Address data (up to 122,000) and message-history data (up to 158,000) overlap, cannot be added and are not fully represented by the selected purchaser-subset count.
Supply chainPossibleOfficial statement
LEAK-536NHK PublishingA About 127,000 recordsUnauthorized access occurred in the email distribution service "Blast Mail" used by the "Everyone's Hobby Gardening" site, resulting in the leakage of personal information of approximately 127,000 members. The leaked information included email addresses, nicknames, gender, and the prefecture of residence.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-676Tokyo MetroB About 80,000 recordsIt was revealed that approximately 80,000 records of email addresses were improperly obtained by a third party from Tokyo Metro's event email newsletter distribution service, Blast Mail. Other information besides email addresses may not have been acquired.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-530Hourai CorporationB Up to 75,140 recordsUnauthorized access occurred to the external email distribution service "BlastMail" commissioned by Hourai Corporation, potentially leaking personal information of up to 75,140 records. The leaked information includes names and email addresses, but does not include credit card information. The contractor is currently conducting an investigation.
Unauthorized access & data leakPossibleOfficial statement
LEAK-469WEBX "side bizz member email list"B About 20,000 recordsOn October 23, 2026, WEBX confirmed that its entire side bizz member email distribution list was exposed through the blastmail supply-chain intrusion at Rakus Light Cloud. Its original company notice estimates approximately 20,000 exposed email address records, pending accurate extraction by the service provider. Names, addresses, passwords, payment cards and bank account data were not held in that mailing service. The company's own database was not compromised. This is a separately affected recipient group of the existing upstream LEAK-411 intrusion, not a second attack on the same provider.
Supply chainConfirmedOfficial statement
LEAK-465Tokyo Agriculture, Forestry and Fisheries Promotion Foundation "Tokyo Wide-Area Agricultural Assistance Volunteer Program"B Up to about 16,000 recordsTokyo Metropolitan Government disclosed on October 23 that personal information linked to the foundation's agricultural volunteer mailing list was exposed in the upstream blastmail intrusion. Up to approximately 16,000 recipient records may include names, email addresses and participant categories. This maximum is not a confirmed count of distinct persons whose records were exfiltrated. The upstream provider confirmed intrusion into two API servers and data removal, but the precise impact on this mailing list remains under investigation.
Supply chainConfirmedOfficial statement
LEAK-470Japan Environmental Management Association for Industry "JEMAICLUB NEWS" mailing listB Up to about 15,000 recordsOn October 23, 2026, the association disclosed that its JEMAICLUB NEWS list might have been exposed through the blastmail provider compromise. Potentially affected records include email addresses and linked contact names, prefectures, organizations and departments. The original association notice gives approximately 15,000 registered recipient records as the upper-bound exposure scope; this is not a confirmed exfiltration count. The association reported the incident to the privacy authority. This list is a distinct affected recipient group of the same upstream LEAK-411 intrusion.
Supply chainPossibleOfficial statement
LEAK-739Toho Holdings Co., Ltd.C About 8,000 recordsUnauthorized access occurred to the external email distribution service Blast Mail used by eHealthcare, a consolidated subsidiary of Toho Holdings Co., Ltd., with a possibility of information leakage. The potentially leaked information includes approximately 8,000 records of physician names and email addresses, approximately 1,000 records of medical institution names, approximately 7,000 records of URLs for physician survey management screens, and birth dates of about 30 physicians. An investigation is ongoing, and new facts may emerge as developments occur.
Unauthorized access & data leakPossibleOfficial statement
LEAK-607IVS2025C About 4,200 recordsUnauthorized access occurred to the web production service "Studio" used by the official IVS2025 website, with a possibility of personal information leakage. The specific extent of the damage is unclear. About 4,200 records of personal information may have been leaked.
Unauthorized access & data leakPossibleOfficial statement
LEAK-613Kanazawa City Fire DepartmentC About 1,700 recordsThe email distribution system of Kanazawa City Fire Department was accessed illegally, potentially exposing registration information of approximately 1,700 businesses. The system is operated by Rakus Light Cloud, which has suspended the service.
Unauthorized access & data leakUnverified reportNews report
LEAK-732Monicle Research Inc.C 1,487 recordsUnauthorized access occurred to the web production service "STUDIO" previously used by the company, revealing that information sent from the old corporate site form may have leaked. The potentially leaked information includes names, furigana, company names, phone numbers, and email addresses of 807 individuals sent between February 22, 2021, and September 3, 2024, totaling 1,487 records. No My Number or credit card information is included.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-680Saitama PrefectureC About 1,200 recordsSaitama Prefecture announced the possibility of a data leak involving personal information of volunteers for the 2026 Saitama Nerin Piku. Unauthorized access occurred on the server of Rakus Light Cloud, which provides email distribution services, and approximately 1,200 records of names and email addresses may have been leaked, but no leak has been confirmed at this time.
Unauthorized access & data leakPossibleOfficial statement
LEAK-531Tamiya CorporationD 345 recordsTamiya announced unauthorized access to its email distribution service Blastmail, and approximately 345 records of personal information may have been leaked.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-475Nagoya CityD Up to about 230 recordsOn October 23, 2026, Nagoya City disclosed that the blastmail service used by its outsourced city-promotion program was compromised at provider Rakus Light Cloud. The potentially exposed city brand-partner mailing list contains organization names, email addresses and contact-person names. Up to approximately 230 companies and organizations were on the list; this is not a confirmed count of leaked records or distinct people. The city had received no reports of secondary misuse at disclosure time. This is a distinct city recipient group within the same upstream LEAK-411 intrusion.
Supply chainPossibleOfficial statement
LEAK-609Shousetsuka ni NarouD 215 recordsShousetsuka ni Narou announced the possibility of unauthorized logins by third parties to registered user accounts and decided to make two-factor authentication mandatory for all users. There were attempts of unauthorized access on 215 records, and it is possible that login information obtained externally was used. Currently, access from suspicious connection environments has been blocked.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-794Hyogo PrefectureE Up to 82 recordsUnauthorized access occurred to the cloud service "Studio" provided by Studio Inc., revealing the possibility of leakage of up to 82 records of personal information. The potentially leaked information includes names, dates of birth, genders, phone numbers, email addresses, and affiliations (such as school names).
Unauthorized access & data leakPossibleOfficial statement
LEAK-463G-Get "Mac House blastmail recipients"On October 23, G-Get reported possible exposure of Mac House newsletter recipients following unauthorized access to third-party blastmail provider Rakus Light Cloud, announced on October 21. Potentially affected fields include names, email addresses, dates of birth, gender and region; provisional registrants supplied email addresses only. The number of affected records and actual extraction of this recipient list remain unconfirmed. This is a separate downstream subscriber group related to existing upstream incident LEAK-411.
Supply chainPossibleOfficial statement
LEAK-468Pizza Hut Japan "online ordering service"On October 23, 2026, Pizza Hut Japan confirmed that an attacker accessed a payment API associated with its domestic online ordering service on October 19 and obtained part of a database containing customer data. Confirmed exposed fields include customer IDs, email addresses, phone numbers, records relating to deleted customer information, session-login tokens and transaction records. Payment card details were not included. The affected record count and technical cause remain under investigation, and the company reported no confirmed secondary harm. Login-session tokens are not equivalent to passwords.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-471Japan Council of Shopping Centers "JCSC NEWS" recipient listIn its October 23, 2026 second report, the association confirmed that the blastmail provider notified it of exposure of the complete JCSC NEWS mailing list. The affected data included names, phonetic names, email addresses, company or organization names, departments and job titles. The original notice does not specify the number of recipients and no justified numeric estimate is available. Its own systems were not breached. This is a distinct affected recipient group of the same upstream LEAK-411 compromise.
Supply chainConfirmedOfficial statement
LEAK-476Saitama UniversityOn October 23, 2026, Saitama University disclosed that an intrusion into its newsletter provider Rakus Light Cloud (blastmail) led to the extraction of the university's subscriber contract information: university and department names, postal address, telephone number, email address and payment history. The university stated that disclosure of its newsletter recipient list had not been confirmed as of that date. This is the university-specific impact of the upstream LEAK-411 compromise, not a separate intrusion.
Supply chainConfirmedOfficial statement
LEAK-505Sompo Japan DC Securities Inc.Sompo Japan DC Securities Inc. announced unauthorized access to an external email distribution service it uses, which may have resulted in the leakage of some customers' email addresses. A detailed investigation is currently underway, and no confirmed leakage has been reported.
Unauthorized access & data leakPossibleOfficial statement
LEAK-532Nulab Inc.Nulab Inc. reported a potential information leak of customer data due to unauthorized access to the external email distribution service "BlastMail." As of now, no confirmed data leak of registered customer information has been identified, but an investigation is ongoing.
Unauthorized access & data leakPossibleOfficial statement
LEAK-533GMO Click SecuritiesGMO Click Securities issued a warning regarding unauthorized trading reported by multiple FX brokers due to automated trading tools. Specifically, reports indicated unauthorized operations by third parties on trading accounts on the servers of "Onamae.com Desktop Cloud" provided by the company; however, no unauthorized operations on the company's accounts have been confirmed at this time.
Unauthorized access & data leakPossibleOfficial statement
LEAK-534Onamae.comOn October 20, 2026, unauthorized access was confirmed on the Onamae.com Desktop Cloud, revealing that unauthorized programs had been installed in some customers' server environments. This unauthorized access may have allowed third parties to obtain login information for transaction accounts stored on the servers. There are 26,739 potentially affected servers.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-537Japan Chamber Music Promotion FoundationSuspicious access by a third party was detected in the email distribution system "Blast Mail" used for the email newsletter "Sō Mail" issued by the Japan Chamber Music Promotion Foundation, leading to an emergency shutdown of the system since October 21, 2026. On October 22, it was confirmed that information leakage from the distribution list had occurred, and contact with the affected individuals has been completed. However, the foundation believes that the registered list is not included in the leaked data. Distribution will remain suspended until the safety of the system is confirmed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-553Asiana AirlinesAsiana Airlines announced that some customer reservation numbers may have been improperly accessed in the system of Amadeus, the operator of a global airline reservation system, leading to a potential leak of personal information. The investigation is ongoing, and the leaked information includes reservation numbers. Asiana Airlines has implemented necessary safety measures and is working to prevent future occurrences.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-554Korean Air and Asiana AirlinesCustomer information from Korean Air and Asiana Airlines was confirmed to have leaked from the system of Amadeus. The leak is estimated to have occurred between August and September 2023 and is believed to be due to unauthorized access to Amadeus's system. An investigation is currently underway, and both companies have expressed their intention to implement measures to prevent recurrence.
Unauthorized access & data leakUnverified reportNews report
LEAK-606Chinzei SuzukaIt was reported that Chinzei Suzuka, a member of FRUITS ZIPPER, experienced unauthorized access to her X account, and the management announced that they are working on recovery. Fans have been urged to be cautious.
Unauthorized access & data leakUnverified reportNews report
LEAK-608School Corporation Advanced Educational InstitutionUnauthorized access occurred to the email distribution service "Blast Mail," confirming the leakage of registered email addresses. The leaked information only includes email addresses, and does not contain names, addresses, or credit card information. Currently, no secondary damage has been confirmed, but there is a possibility of receiving spam or phishing emails in the future.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-610Hobby JapanUnauthorized access occurred to the email newsletter distribution system "Blast Mail," potentially leaking personal information of subscribers registered on the Hobby Japan website. The leaked information may include names, email addresses, dates of birth, genders, and addresses (only the prefecture names).
Unauthorized access & data leakPossibleOfficial statement
LEAK-611Chiba Prefecture Sports AssociationThe Chiba Prefecture Sports Association, a public interest incorporated foundation of Chiba Prefecture, announced that it experienced unauthorized access to the cloud service "Studio" provided by a contractor, potentially leading to the leakage of personal information. The prefecture is requesting an investigation into the facts and the extent of the impact.
Unauthorized access & data leakPossibleOfficial statement
LEAK-612General Internet UsersThe PHP security team announced a critical vulnerability that could potentially affect many services, including finance, railways, and municipalities. General users have been urged to check the response status of the services they use.
Unauthorized access & data leakUnverified reportNews report
LEAK-614Sakai CitySakai City issued a warning regarding a series of incidents involving unauthorized access to personal information due to breaches affecting private businesses and government agencies. The city urged residents to be cautious of suspicious emails and SMS messages, and to respond carefully if asked for personal information.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-620Nagano PrefectureUnauthorized access occurred in the Nagano Prefecture system, potentially leaking registered email addresses and other information. The prefecture is investigating the incident, contacting relevant parties, and reinforcing security measures.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-627Natori CityUnauthorized access occurred in the email distribution system used by Natori City, potentially leading to the leakage of personal information registered in the system. The information that may have been leaked includes contractor information such as email addresses from the Digital Policy Division of Natori City. An investigation is ongoing, and they will promptly inform the public of any new findings.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-628Hitachi Global Life SolutionsHitachi Global Life Solutions announced that Rakus Light Cloud, which provides the email distribution service "blastmail," may have experienced unauthorized access, leading to a potential leak of customer personal information. The potentially leaked information includes email addresses and names. As of now, there has been no confirmation of unauthorized use of personal information.
Unauthorized access & data leakPossibleOfficial statement
LEAK-677Iwai Cosmo SecuritiesDue to maintenance related to system vulnerability measures, some pages were temporarily inaccessible. No security incident was confirmed.
Unauthorized access & data leakUnverified reportOfficial statement
LEAK-678NEXCO East JapanThe highway information site "Dora Tora" was confirmed to have been accessed illegally by a third party, potentially exposing some customers' registration information. The information that may have been viewed includes email addresses, passwords, gender, prefecture, and year of birth.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-679Fukuoka PrefectureFukuoka Prefecture reported a potential data breach involving unauthorized access by a third party to the website of "Fukuoka Prefecture Regional Revitalization Cooperation Team Supporters Coneru," which is a support project for regional revitalization cooperation teams. The leaked information may include names, email addresses, phone numbers, regions, affiliations, and consultation details.
Unauthorized access & data leakPossibleOfficial statement
LEAK-681Shimonoseki CityUnauthorized access occurred to the email distribution system "Blast Mail" in Shimonoseki City's employment support project, with a possibility of personal information leakage. The potentially leaked information includes registrants' names, email addresses, and company names. The service is currently suspended, and an investigation is ongoing.
Unauthorized access & data leakPossibleOfficial statement
LEAK-707Yokohama CityThe report details the status of the internal reporting and specific request recording and disclosure system for fraud prevention in Yokohama City, including past meeting dates. No security incidents were confirmed in the report.
Unauthorized access & data leakUnverified reportOfficial statement
LEAK-710GMO Internet Group Inc.GMO Internet Group's FX trading server was reported to have been accessed illegally, potentially compromising users' trading account IDs and passwords.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-728Ducas Copy Japan Co., Ltd.Unauthorized access occurred to the Onamae.com Desktop Cloud service, confirming that some customer accounts were accessed using combinations of IDs and passwords that may have leaked from other services. Customers have been asked to change their passwords.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-731Monicle Inc.Monicle Inc. announced that there was unauthorized access to the website production service "STUDIO" that they previously used, and there is a possibility that personal information sent from the old corporate site form has been leaked. The potentially leaked information includes names, furigana, company names, phone numbers, and email addresses, but does not include My Number or credit card information. Currently, no secondary damage has been confirmed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-813Japan Logistics Systems AssociationRecently, there have been a series of information leaks due to unauthorized access through the supply chain in domestic companies. The Ministry of Economy, Trade and Industry has issued a warning urging thorough management and countermeasures.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-816And ST Inc.Unauthorized access occurred on the business server of And ST Inc., and it was announced that approximately 2,500,000 customer records and about 10,000 partner records may have been leaked. Employee information is under verification, and payment information such as credit cards is not affected. Currently, the server is being isolated and the access route is being blocked.
Unauthorized access & data leakPossibleOfficial statement
LEAK-863Yamashin YBS GroupYamashin YBS Group announced that unauthorized access occurred at the company responsible for email distribution, resulting in the leakage of approximately 15,000 pieces of personal information.
Unauthorized access & data leakConfirmedOfficial statement

Showing 20 of 70 cases

Incidents on Oct 23, 2026