Incidents on Nov 2, 2026

Publication date: Dates are source publication dates (JST), not occurrence dates.

Details and evidence links

Filter incidents

Showing 31 of 31 incidents

Incidents on Nov 2, 2026
DateTargetSummaryClassificationSource links
LEAK-901Suntory HoldingsA About 100,000 recordsSuntory Holdings announced that an external cloud service used by the group was accessed illegally, resulting in the leakage of approximately 100,000 records of personal information. The leaked information includes names and email addresses of about 90,000 employees from group companies and affiliated firms, email addresses of approximately 7,300 individuals registered in corporate activity experience programs, and names of about 7,200 applicants for the 2026 new graduate recruitment selection. No unauthorized use has been confirmed at this time.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-899Suntory HoldingsB About 90,000 peopleSuntory Holdings announced that it suffered unauthorized access, resulting in the leakage of personal information for approximately 90,000 people, including employees, and information for over 7,000 job applicants.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-875Sunstage Inc.B Up to about 19,853 recordsUnauthorized access by a third party was confirmed on the service application site of Belluna Notice operated by Sunstage Inc., and it was announced that customer information for up to approximately 19,853 records may have been viewed or obtained. Investigations into the cause and extent of the impact are currently underway.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-882UCC Ueshima CoffeeC 5,529 recordsUCC Ueshima Coffee announced that there was unauthorized access to the system of Sonic Move, resulting in the leakage of 5,529 email addresses. The leaked information did not include names, addresses, or credit card information.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-921Kumamoto PrefectureD 478 peoplePersonal information of 478 people who participated in an event in Kumamoto Prefecture was accessed illegally and leaked.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-974DCM CorporationD 426 peopleUnauthorized access occurred in the membership service "My Bo," confirming the leakage of information for 426 people. The leaked information includes membership numbers, email addresses, membership statuses, and points held, but does not include important personal information such as names or passwords. Currently, measures are being taken to prevent recurrence, and individual notifications are being sent to the affected parties.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-881iStyle Inc.On October 28, 2026, unauthorized access to @cosme confirmed the leakage of information for approximately 3,000,000 members. The leaked information included user IDs, nicknames, names, addresses, phone numbers, and email addresses, but did not include passwords or credit card information.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-883SuntoryUnauthorized access by a third party was confirmed in an external cloud service used by the Suntory Group, resulting in the leakage of information for approximately 90,000 employees and 7,323 customers. Unauthorized access has now been blocked, and a report has been made to the Personal Information Protection Commission.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-884TV TokyoTV Tokyo announced that unauthorized access was confirmed on its group shopping site "Tereto Mart," leading to an emergency suspension of the site's services. While information leakage has not been confirmed, the company is conducting a detailed investigation into the scope of the impact and the intrusion route.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-886NTT DataAn outsourcing partner of NTT Data suffered unauthorized access, affecting multiple companies including Rakuten Securities and Kintetsu. Kintetsu announced a potential leak of 2,678 records, SBI Securities reported 1,169 individuals, and Rakuten Securities indicated a total of 362 customer information leaks.
Unauthorized access & data leakUnverified reportNews report
LEAK-887Konan CityUnauthorized access occurred in the health check reservation system of Konan City, and it was revealed that personal information of some users may have been leaked. The city has suspended system functions and accounts in response to unauthorized access, including suspected impersonation logins, and has strengthened security measures. Users are advised to change their passwords.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-897Nojima CorporationOn November 1, 2026, unauthorized access was confirmed against the member management system of Nojima Online, resulting in the leakage of approximately 7,000,000 pieces of personal information. The leaked information includes names, dates of birth, genders, addresses, phone numbers, login IDs, encrypted passwords, and email addresses. No credit card information was retained. Measures are currently being implemented to prevent further damage.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-900Osaka GasOsaka Gas announced that there was unauthorized access to its outsourced email distribution service, resulting in the leakage of approximately 35,000 member accounts. The leaked information includes email addresses from messages sent between October 8 and October 29, 2026, and does not include names, addresses, phone numbers, or credit card information.
Unauthorized access & data leakUnverified reportNews report
LEAK-902HYBEHYBE announced that its internal systems were hacked, resulting in the leakage of some personal information. The leaked information included personal details of affiliated company personnel and former and current staff. The IP addresses and access routes used in the attack have been blocked, and reports to relevant authorities have been completed.
Unauthorized access & data leakUnverified reportNews report
LEAK-903Komatsu City, Ishikawa PrefectureA woman in her 70s living in Komatsu City, Ishikawa Prefecture, was defrauded of cash, gold, platinum, and cryptocurrency by a man posing as a police officer, resulting in a total loss of approximately 13,800,000 yen. The woman received a call from a man claiming to be from a delivery company and interacted via LINE video call with a man dressed in a police uniform, following his instructions to hand over her assets. Ultimately, she also sent approximately 7,400,000 yen worth of cryptocurrency.
Unauthorized access & data leakUnverified reportNews report
LEAK-905Saga ShimbunSince September, there have been a series of personal information leaks across companies in Japan, particularly concerning the leakage of identification documents. This has increased the risk of unauthorized bank account openings and consumer finance contracts.
Unauthorized access & data leakUnverified reportNews report
LEAK-922Kagoshima Prefectural PoliceKagoshima Prefectural Police announced the arrest of five men for opening bank accounts for fraudulent purposes. According to the police, more than 150 fraudulent accounts are believed to have been opened, raising suspicions of fraud.
Unauthorized access & data leakUnverified reportNews report
LEAK-923Ehime ShimbunshaEhime Shimbunsha reported that due to a cyber attack, Peikuraud Holdings and Suntory Holdings experienced unauthorized access, resulting in the leakage of personal information. Nojima also announced that approximately 7,000,000 personal accounts were leaked.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-924AtcosmeUnauthorized access to the beauty comprehensive site "Atcosme" resulted in the leakage of some member information for approximately 3,000,000 users. The leaked information includes user IDs, nicknames, names, postal codes, addresses, phone numbers, email addresses, genders, birth dates, skin types, and hair types, but does not include passwords or credit card information. Currently, there are no confirmed cases of unauthorized use of personal information or secondary damage.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-926Himeji CityTKC Corporation reported a potential data breach affecting Himeji City's online procedure portal site due to unauthorized access from an external service, which may have resulted in the leakage of personal information such as email addresses and names. They are currently verifying the situation.
Unauthorized access & data leakPossibleOfficial statement
LEAK-937Joso CityReports indicate that unauthorized access and information leakage occurred in Joso City.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-938Nojima OnlineUnauthorized access to Nojima Online confirmed the leakage of approximately 7,000,000 member records. The leaked information includes names, dates of birth, genders, addresses, phone numbers, email addresses, login IDs, and encrypted passwords. It is stated that credit card information is not retained.
Unauthorized access & data leakUnverified reportNews report
LEAK-939TKCTKC announced that unauthorized access to Alala's "Alala Message," which it has entrusted with email distribution, resulted in the leakage of up to 2,238,812 customer email addresses. Due to the suspension of Alala's service, email sending from each system is currently not possible.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-945National Institute of Information and Communications TechnologyOn November 2, 2026, the National Institute of Information and Communications Technology announced an incident of unauthorized access and information leakage. Details have not been disclosed, but the scope of the affected information and specific damages are under investigation.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-953Sony AssuranceSony Assurance reported unauthorized access to the business system of its contractor, Prestige Core Solutions. They are urging caution due to the potential leakage of customer information.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-957Fukui CityFukui City reported that in disclosed official documents, masking processing could be removed through specific operations, potentially exposing personal information of 1,628 individuals.
Unauthorized access & data leakPossibleOfficial statement
LEAK-958AraraArara Inc. announced that unauthorized access to its email distribution service "Arara Message" may have resulted in the external theft of approximately 7,700,000 email addresses and member information. The service has been suspended since October 31, 2026, and the resumption date is undecided.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-962Tochigi BankUnauthorized access occurred to the email distribution service used by Tochigi Bank, resulting in the leakage of some customers' email addresses to external parties. The leaked information consists solely of email addresses, and verification is currently ongoing. Customers are being urged to be cautious of suspicious emails.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-965Bic CameraBic Camera announced that approximately 14,900,000 email addresses and other information may have been leaked due to unauthorized access to a contractor.
Unauthorized access & data leakPossibleOfficial statement
LEAK-968Tobu RailwayTobu Railway announced the results of an investigation into unauthorized access to a contracted service provider. While specific details about the damage or impact were not provided, the emphasis was placed on their information security efforts.
Unauthorized access & data leakConfirmedOfficial statement
LEAK-973Eniwa CityThe email distribution service of Eniwa City reported a potential personal information leak, and an investigation is ongoing. The information that may have been leaked includes email addresses, while other details are still under investigation. Citizens are being urged to be cautious of suspicious phone calls or emails.
Unauthorized access & data leakPossibleOfficial statement

Showing 20 of 31 cases

Incidents on Nov 2, 2026