Free diagnosis

Incidents on Oct 24, 2026

Publication date: Dates are source publication dates (JST), not occurrence dates.

Details and evidence links

Filter incidents

Showing 13 of 13 incidents

Incidents on Oct 24, 2026
DateTargetSummaryClassificationSource links
LEAK-496Kakao Piccoma "Piccoma" newsletter recipientsS 1,002,404 recordsKakao Piccoma Corp. announced on October 24, 2026 (first report) that unauthorized access to the Blastmail email delivery service operated by its contractor Rakus Light Cloud exposed 1,002,404 records of recipient email addresses from one Piccoma newsletter mailing. Only email addresses were leaked and there is no possibility of password leakage, the company says. Piccoma's apps, web services and internal systems were not accessed. The count is the number of recipient addresses for a single mailing, not a deduplicated number of people. The upstream intrusion is the same incident as LEAK-411 (Rakus Light Cloud). The company warns of phishing emails and SMS impersonating Piccoma or publishers.
Supply chainConfirmedOfficial statement
LEAK-789Saga UniversityB About 80,000 peopleSaga University was reported to have suffered a ransomware attack, potentially leading to the leakage of personal information for approximately 80,000 people, including students and faculty members.
RansomwareConfirmedOfficial statement
AI-110Claude CodeC Multiple filesA subagent running in parallel executed a wildcard find and rm -r in the shared session scratchpad and deleted about 70 temporary directories that other subagents had created with mktemp -d, according to the report. Named files were unaffected, but other agents' intermediate work was lost.
Data loss caused by AIUnverified reportFirst-party report
AI-114Claude CodeC Multiple filesWhen two Claude Code desktop instances with different user-data-dir settings are used on the same repository on a Mac, each instance's untracked-directory cleanup treats the other instance's live worktrees as orphans and force-removes them after 24 hours, so session worktrees are recreated daily and trust prompts repeat, according to the report. The reporter says this happened 35 times in five days.
Data loss caused by AIUnverified reportFirst-party report
LEAK-493Shuppin Co., Ltd.C 2,216 recordsShuppin Co., Ltd. announced that there was unauthorized access to the system "WASABI SWITCH" provided by its contractor Wasabi Co., Ltd., resulting in the leakage of customer information. The leaked information included 2,216 records of order information and 31 records of management accounts. The leakage occurred between October 14 and 16, 2026, and did not include credit card information.
Unauthorized access & data leakPossibleOfficial statement
LEAK-495Chariloto "Charica members"D 373 peopleChariloto announced on October 24, 2026 that a third party exploited a vulnerability in the Chariloto betting app between about 9:30 and 13:00 on October 21, 2026 and obtained the personal information of 373 people who are Charica members. The data covers member IDs, names, dates of birth, gender, postal codes, addresses, email addresses, phone numbers, Charica balances, bank account details (bank, branch, account type, account number and holder name), credit card details (holder name, last four digits, expiry date and brand), deposit and withdrawal history and betting history. Login passwords, full credit card numbers and security codes were not leaked, the company says. No secondary damage from misuse had been confirmed at the time of publication.
Unauthorized access & data leakConfirmedOfficial statement
AI-113Claude CodeE History onlyAfter shutting down claude remote-control on a Linux VM over a weekend and restarting it, all of the previous week's chats appeared offline in Claude Desktop with the message that the session environment had been deleted, and work could not be continued, according to the report. The reporter had to copy a long chat history into a new chat by hand.
Session & history lossUnverified reportFirst-party report
LEAK-499Shizuoka City Children's Creative Town Ma-a-ru "Blastmail registration data"Shizuoka City Children's Creative Town "Ma-a-ru" announced on October 24, 2026 that the Blastmail email delivery service operated by Rakus Light Cloud, which it used to send lottery results and cancellation notices, suffered unauthorized third-party access on October 21, 2026 and was shut down, and that personal information of users registered in the service may have been leaked. As of 14:00 on October 24 no leak had been confirmed and the operator had not reported one, but the possibility cannot be ruled out while the investigation continues. The registered data items and number of people are not stated. The upstream intrusion is the same incident as LEAK-411.
Supply chainPossibleOfficial statement
LEAK-502Igreks "Y-mail"Igreks Inc. began emergency maintenance of its Y-mail email delivery system at about 3:50 on October 24, 2026 and, in its fifth report at 18:08 the same day, confirmed traces of intrusion into the web application of some customers' delivery environments using possibly leaked credentials, with phishing emails possibly having been sent. Its seventh report at 12:52 on October 25 said data may have been taken or read from the portal site, including delivery-environment setup scripts, connection details for the payment processor and server configuration files; the connection secrets have been changed, no irregular payments were found and no credit card data was included. The company says no customer or individual personal information was included, while logs show up to 30 email addresses per delivery environment may have been viewed; the total number of phishing emails and whether personal information leaked remain under investigation. It reported to Hachioji police and the relevant ministries on October 24, and its ninth report on October 26 announced regeneration of all customers' DKIM private keys and a DMARC reject policy.
Unauthorized access & data leakUnder investigationOfficial statement
LEAK-539Yaizu CityThe Yaizu Adult Club email newsletter distribution service reported unauthorized access by a third party, potentially leading to the external exfiltration of personal information. An internal investigation by the operating company has not confirmed any information leakage, but an external investigation is ongoing.
Unauthorized access & data leakPossibleOfficial statement
LEAK-555Korean Airlines and Asiana AirlinesA system from an overseas IT company responsible for reservation operations for Korean Airlines and Asiana Airlines may have leaked customer reservation numbers. The scale of the damage and details of the leaked information are currently under investigation.
Unauthorized access & data leakUnverified reportNews report
LEAK-682Iwakuni CityUnauthorized access occurred to the email newsletter distribution service of the Iwakuni City Commerce Promotion Division, potentially leading to the external transfer of contractor information. The information that may have been leaked includes names, company names, job titles, contact names, email addresses, and phone numbers, but no confirmation of information leakage for registered users has been established.
Unauthorized access & data leakPossibleOfficial statement
LEAK-888Hokuriku Electric PowerHokuriku Electric Power announced that approximately 550,000 email addresses of members of the membership service "Hokurink" were leaked externally. The leak occurred due to unauthorized access to a service used by a company contracted for email distribution, resulting in the potential exposure of personal information from about 380 companies, totaling approximately 77,000,000 records. Only email addresses were leaked, and no other information has been confirmed as compromised.
Unauthorized access & data leakConfirmedOfficial statement
Incidents on Oct 24, 2026