Free diagnosis

Incidents on Oct 28, 2026

Publication date: Dates are source publication dates (JST), not occurrence dates.

Details and evidence links

Filter incidents

Showing 35 of 35 incidents

Incidents on Oct 28, 2026
DateTargetSummaryClassificationSource links
LEAK-741Karuisawa TownS 4,454,097 recordsA report indicated that personal information of users registered on the hometown tax portal "Furusato Choice," operated by Trust Bank Inc., was leaked due to unauthorized access to the system. The leaked personal information includes 4,454,097 records, comprising names, email addresses, addresses, phone numbers, hashed passwords, and estimated donation deduction amounts. Currently, no leakage of donor personal information has been confirmed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-656Hanakyu-PitS 4,238,242 recordsHanakyu-Pit announced that unauthorized access occurred to its "Internet Hanakyu-Pit" and "Business Hanakyu-Pit" services, resulting in the leakage of 4,230,000 member information. The leaked information includes user IDs, encrypted passwords, and email addresses for both PC and mobile use, but does not include personal information or credit card details. Up to 4,238,242 records may have been leaked.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-979Rise UPS 1,548,002 recordsUnauthorized access occurred to the email distribution service Cuenote FC operated by Rise UP, resulting in the leakage of 1,548,002 customer records. The leaked information includes email addresses and UIDs, but credit card information and passwords were not leaked. Currently, there is no confirmed misuse of the leaked information.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-659Sony LifeA About 385,000 recordsUnauthorized access occurred at Sony Life, resulting in the leakage of information for 385,000 policyholders and insured individuals. The leaked information included names, dates of birth, and addresses.
Unauthorized access & data leakUnverified reportNews report
LEAK-716Life Card Co., Ltd.A 339,610 recordsLife Card Co., Ltd. announced that unauthorized access occurred in the external email distribution service "Cuenote FC," potentially leading to the leakage of some customer information. The potentially leaked information includes names, email addresses, card names, and parts of ETC card numbers, affecting 339,610 records. No confirmation of unauthorized use has been made at this time.
Unauthorized access & data leakPossibleOfficial statement
LEAK-557Japan Airlines and Japan Transocean AirB About 92,000 peopleOn October 28, 2026, Japan Airlines and Japan Transocean Air announced that there were signs of unauthorized access to the Amadeus system, which is contracted for their passenger service system, resulting in some customer reservation information being accessed externally. Approximately 92,000 reservation records were affected, including names and travel dates. There was no confirmation of leaked credit card numbers or passwords.
Unauthorized access & data leakUnverified reportNews report
LEAK-514Ehime ShimbunB 32,405 recordsEhime Shimbun announced that personal information of email newsletter recipients was leaked. The leaked information includes names, member IDs, email addresses, gender, and dates of birth, affecting a total of 32,405 records. Addresses, phone numbers, credit card information, and passwords were not included. At this time, no confirmed misuse has been reported.
Unauthorized access & data leakPossibleOfficial statement
LEAK-704YmirlinkB 30,750 recordsUnauthorized access occurred in the email distribution service "Cuenote FC" provided by Ymirlink, and it was reported that 30,750 records of email addresses registered in the PRAISE-NET email distribution service may have leaked externally. Ymirlink explained that the leaked information does not include personal information other than email addresses.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-691Benefit OneB 29,465 peopleOn October 21, 2026, unauthorized access occurred in a system operated by Forestec, a contractor of Benefit One, confirming the leakage of personal information for approximately 29,465 people. The leaked information included names, furigana, dates of birth, gender, postal codes, email addresses, customer numbers, membership information, and management numbers used for payment processing. An investigation is ongoing, and measures are being taken to prevent further damage.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-978H2O RetailingB 28,052 recordsUnauthorized access occurred in the email distribution service "Cuenote FC" of Ymirlink Inc., confirming the leakage of email addresses and other information. The number of potentially leaked records is 28,052 records, affecting members who joined between November 2024 and February 2026. No other personal information is included.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-663Baskin-RobbinsC Up to 8,174 peopleBaskin-Robbins announced that its mobile order service "31 Mobile Order" was subject to unauthorized access, resulting in the leakage of information for up to 8,174 users. The leaked information included email addresses, phone numbers, names, and 31 Club member IDs, with one delivery address also affected. Credit card information and passwords were not leaked.
Unauthorized access & data leakUnverified reportNews report
LEAK-660Doutor CoffeeD 951 peopleDoutor Coffee announced that it may have suffered unauthorized access, resulting in the potential leakage of personal information for 951 employees and former employees. The leaked information includes names, addresses, phone numbers, and bank account numbers.
Unauthorized access & data leakUnverified reportNews report
LEAK-661ENEOS Power CorporationE 57 recordsOn October 27, 2026, it was revealed that systems related to ENEOS Power Corporation's "ENEOS Electricity" and "Electricity Services" were accessed illegally, resulting in the leakage of personal information for 57 people. The leaked information included names, addresses, login IDs, and passwords. An investigation into the cause and extent of the impact is currently underway.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-654Saitama Prefectural Kawagoe High SchoolE 39 recordsUnauthorized access occurred in the cloud environment of Studio Inc. used for the inquiry form of the cultural festival at Saitama Prefectural Kawagoe High School, and it has been confirmed that there is a possibility of leakage of personal information for 39 records. As of now, no secondary damage due to the misuse of the information has been confirmed.
Unauthorized access & data leakPossibleOfficial statement
LEAK-652SubwayF 7 peopleUnauthorized access occurred in Subway's official mobile ordering system, and it was announced that some customers' personal information may have been leaked. The potentially leaked information includes names, email addresses, phone numbers, dates of birth, and genders. The affected customers are 7 people, with 7 orders. There is no confirmation of credit card information leakage.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-546CreemaUnauthorized access occurred at the company operating the email newsletter distribution service Blast Mail, confirming that some of the recipient email addresses were leaked. The leaked information includes the email addresses of registered customers. Currently, we are awaiting a report on the detailed number of leaked records.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-556Japan AirlinesOn October 28, 2026, Japan Airlines (JAL) announced that there had been unauthorized access to the systems of their contractor, Amadeus. Evidence was found that approximately 92,000 reservation records were accessed externally, but there was no leakage of credit card numbers or passwords, and there was no impact on operations.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-653Animate CorporationUnauthorized access occurred in the email distribution service "Cuenote FC" used by Animate Corporation, confirming the leakage of customer personal information. The leaked information includes email addresses, gender, prefecture of residence, and Animate membership codes, while names, addresses, and phone numbers were not leaked. Currently, no secondary damage has been confirmed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-655Don QuijoteDon Quijote announced that the servers of Cox Co., Ltd. were attacked by external cyber threats and encrypted by ransomware. The potentially affected information includes the names, addresses (some), and phone numbers (some) of customers who requested watch repairs since September 2025. While the fact of a data breach has not been confirmed, the possibility cannot be ruled out.
RansomwareConfirmedOfficial statement
LEAK-657Yomiuri ShimbunAccording to Yomiuri Shimbun, recent cyberattacks have led to a large-scale information leak. Specific details of the damage are unclear, but information has been provided regarding the current state of cyberattacks and preparedness.
Unauthorized access & data leakUnverified reportNews report
LEAK-658YakultYakult announced on October 26 that it confirmed unauthorized access to its official website. The impact on customer information is currently under investigation.
Unauthorized access & data leakUnder investigationOfficial statement
LEAK-662Animate CorporationUnauthorized access to the email distribution service "Cuenote FC" confirmed the leakage of Animate customer information. The leaked information includes email addresses, gender, prefecture of residence, and Animate membership codes, but names, addresses, phone numbers, credit card information, and passwords were not leaked. Currently, no secondary damage has been confirmed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-692Korean financial institutionsReports indicate that a large number of unauthorized access attempts from North Korean IP addresses have been detected in South Korea, suggesting ongoing cyber attacks against financial institutions and others.
Unauthorized access & data leakUnverified reportNews report
LEAK-693Kyushu UniversityUnauthorized access to external services used by Kyushu University confirmed the leakage of personal information. Specifically, names and email addresses of alumni were leaked from the Kyushu University Alumni Association's email distribution service. Additionally, unauthorized access to the QLIFICA monitoring system may have resulted in the leakage of account information for 9 staff members.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-703Yokohama CityYokohama City held a press conference regarding the potential leakage of personal information in its email newsletter distribution service on its official website.
Unauthorized access & data leakPossibleOfficial statement
LEAK-725Integral CorporationAccording to the security report from Integral Corporation, unauthorized access was reported on the Onamae.com Desktop Cloud, resulting in all servers being halted and threats for monetary demands from the attackers.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-734BushiroadBushiroad announced that approximately 13,000 individuals' personal information was leaked due to unauthorized access to a contractor developing the smartphone app 'BanG Dream! Our Notes.' The leaked information includes phone numbers, addresses, and email addresses, but no leaks of passwords or credit card information have been confirmed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-737Personal Information Protection CommissionA report was made regarding trends in personal data leaks due to recent unauthorized access, stating that the total number of individuals affected by leaks from April 1 to October 16, 2026, reached approximately 260 million.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-745Itochu CorporationItochu Corporation announced that customer systems were compromised via a contractor for development and maintenance.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-746Minebea Mitsumi Inc.Minebea Mitsumi Inc. announced that customer systems were compromised via a contractor for development and maintenance. Specific details regarding the damage and scope of impact have not been disclosed.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-790PanasonicPanasonic recalled shavers after a fire incident occurred in September while charging, as revealed by the Consumer Affairs Agency. The incident involved the melting of the connection between the shaver and a USB cable when using third-party USB cables and AC adapters, leading to a fire. The cause is under investigation, with the possibility that the connection shorted due to liquid contamination.
Unauthorized access & data leakUnverified reportNews report
LEAK-853Kainan CityUnauthorized access to private businesses has led to a series of personal information leaks, raising concerns about accompanying fraud. There are reports of contacts requesting personal information input and creating a sense of urgency, necessitating caution.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-864Funabashi CityFunabashi City reported unauthorized access to the email distribution service of the hometown tax portal site "Sato Furu," which it uses, resulting in the leakage of user information. The email distribution service is currently suspended, and password changes and notifications to the Personal Information Protection Commission are being conducted.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-912SatoFuru Co., Ltd.An unauthorized access incident occurred in the email distribution service used by SatoFuru Co., Ltd., leading to the leakage of some information. It has been stated that credit card information was not leaked.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-915SatoFuru Co., Ltd.Unauthorized access occurred in the email distribution service used by SatoFuru Co., Ltd., and there is a possibility that personal information has been leaked.
Unauthorized access & data leakConfirmedOfficial statement

Showing 20 of 35 cases

Incidents on Oct 28, 2026