Incidents on Nov 2, 2026
Publication date: Dates are source publication dates (JST), not occurrence dates.
Details and evidence links
Filter incidents
Showing 31 of 31 incidents
| Date | Target | Summary | Classification | Source links |
|---|---|---|---|---|
| LEAK-901 | Suntory Holdings | A About 100,000 | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-899 | Suntory Holdings | B About 90,000 | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-875 | Sunstage Inc. | B Up to about 19,853 | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-882 | UCC Ueshima Coffee | C 5,529 | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-921 | Kumamoto Prefecture | D 478 | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-974 | DCM Corporation | D 426 | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-881 | iStyle Inc. | On October 28, 2026, unauthorized access to @cosme confirmed the leakage of information for approximately 3,000,000 members. The leaked information included user IDs, nicknames, names, addresses, phone numbers, and email addresses, but did not include passwords or credit card information. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-883 | Suntory | Unauthorized access by a third party was confirmed in an external cloud service used by the Suntory Group, resulting in the leakage of information for approximately 90,000 employees and 7,323 customers. Unauthorized access has now been blocked, and a report has been made to the Personal Information Protection Commission. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-884 | TV Tokyo | TV Tokyo announced that unauthorized access was confirmed on its group shopping site "Tereto Mart," leading to an emergency suspension of the site's services. While information leakage has not been confirmed, the company is conducting a detailed investigation into the scope of the impact and the intrusion route. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-886 | NTT Data | An outsourcing partner of NTT Data suffered unauthorized access, affecting multiple companies including Rakuten Securities and Kintetsu. Kintetsu announced a potential leak of 2,678 records, SBI Securities reported 1,169 individuals, and Rakuten Securities indicated a total of 362 customer information leaks. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-887 | Konan City | Unauthorized access occurred in the health check reservation system of Konan City, and it was revealed that personal information of some users may have been leaked. The city has suspended system functions and accounts in response to unauthorized access, including suspected impersonation logins, and has strengthened security measures. Users are advised to change their passwords. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-897 | Nojima Corporation | On November 1, 2026, unauthorized access was confirmed against the member management system of Nojima Online, resulting in the leakage of approximately 7,000,000 pieces of personal information. The leaked information includes names, dates of birth, genders, addresses, phone numbers, login IDs, encrypted passwords, and email addresses. No credit card information was retained. Measures are currently being implemented to prevent further damage. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-900 | Osaka Gas | Osaka Gas announced that there was unauthorized access to its outsourced email distribution service, resulting in the leakage of approximately 35,000 member accounts. The leaked information includes email addresses from messages sent between October 8 and October 29, 2026, and does not include names, addresses, phone numbers, or credit card information. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-902 | HYBE | HYBE announced that its internal systems were hacked, resulting in the leakage of some personal information. The leaked information included personal details of affiliated company personnel and former and current staff. The IP addresses and access routes used in the attack have been blocked, and reports to relevant authorities have been completed. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-903 | Komatsu City, Ishikawa Prefecture | A woman in her 70s living in Komatsu City, Ishikawa Prefecture, was defrauded of cash, gold, platinum, and cryptocurrency by a man posing as a police officer, resulting in a total loss of approximately 13,800,000 yen. The woman received a call from a man claiming to be from a delivery company and interacted via LINE video call with a man dressed in a police uniform, following his instructions to hand over her assets. Ultimately, she also sent approximately 7,400,000 yen worth of cryptocurrency. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-905 | Saga Shimbun | Since September, there have been a series of personal information leaks across companies in Japan, particularly concerning the leakage of identification documents. This has increased the risk of unauthorized bank account openings and consumer finance contracts. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-922 | Kagoshima Prefectural Police | Kagoshima Prefectural Police announced the arrest of five men for opening bank accounts for fraudulent purposes. According to the police, more than 150 fraudulent accounts are believed to have been opened, raising suspicions of fraud. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-923 | Ehime Shimbunsha | Ehime Shimbunsha reported that due to a cyber attack, Peikuraud Holdings and Suntory Holdings experienced unauthorized access, resulting in the leakage of personal information. Nojima also announced that approximately 7,000,000 personal accounts were leaked. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-924 | Atcosme | Unauthorized access to the beauty comprehensive site "Atcosme" resulted in the leakage of some member information for approximately 3,000,000 users. The leaked information includes user IDs, nicknames, names, postal codes, addresses, phone numbers, email addresses, genders, birth dates, skin types, and hair types, but does not include passwords or credit card information. Currently, there are no confirmed cases of unauthorized use of personal information or secondary damage. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-926 | Himeji City | TKC Corporation reported a potential data breach affecting Himeji City's online procedure portal site due to unauthorized access from an external service, which may have resulted in the leakage of personal information such as email addresses and names. They are currently verifying the situation. | Unauthorized access & data leakPossibleOfficial statement | |
| LEAK-937 | Joso City | Reports indicate that unauthorized access and information leakage occurred in Joso City. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-938 | Nojima Online | Unauthorized access to Nojima Online confirmed the leakage of approximately 7,000,000 member records. The leaked information includes names, dates of birth, genders, addresses, phone numbers, email addresses, login IDs, and encrypted passwords. It is stated that credit card information is not retained. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-939 | TKC | TKC announced that unauthorized access to Alala's "Alala Message," which it has entrusted with email distribution, resulted in the leakage of up to 2,238,812 customer email addresses. Due to the suspension of Alala's service, email sending from each system is currently not possible. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-945 | National Institute of Information and Communications Technology | On November 2, 2026, the National Institute of Information and Communications Technology announced an incident of unauthorized access and information leakage. Details have not been disclosed, but the scope of the affected information and specific damages are under investigation. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-953 | Sony Assurance | Sony Assurance reported unauthorized access to the business system of its contractor, Prestige Core Solutions. They are urging caution due to the potential leakage of customer information. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-957 | Fukui City | Fukui City reported that in disclosed official documents, masking processing could be removed through specific operations, potentially exposing personal information of 1,628 individuals. | Unauthorized access & data leakPossibleOfficial statement | |
| LEAK-958 | Arara | Arara Inc. announced that unauthorized access to its email distribution service "Arara Message" may have resulted in the external theft of approximately 7,700,000 email addresses and member information. The service has been suspended since October 31, 2026, and the resumption date is undecided. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-962 | Tochigi Bank | Unauthorized access occurred to the email distribution service used by Tochigi Bank, resulting in the leakage of some customers' email addresses to external parties. The leaked information consists solely of email addresses, and verification is currently ongoing. Customers are being urged to be cautious of suspicious emails. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-965 | Bic Camera | Bic Camera announced that approximately 14,900,000 email addresses and other information may have been leaked due to unauthorized access to a contractor. | Unauthorized access & data leakPossibleOfficial statement | |
| LEAK-968 | Tobu Railway | Tobu Railway announced the results of an investigation into unauthorized access to a contracted service provider. While specific details about the damage or impact were not provided, the emphasis was placed on their information security efforts. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-973 | Eniwa City | The email distribution service of Eniwa City reported a potential personal information leak, and an investigation is ongoing. The information that may have been leaked includes email addresses, while other details are still under investigation. Citizens are being urged to be cautious of suspicious phone calls or emails. | Unauthorized access & data leakPossibleOfficial statement |
Showing 20 of 31 cases