Incidents on Nov 3, 2026
Publication date: Dates are source publication dates (JST), not occurrence dates.
Details and evidence links
Filter incidents
Showing 11 of 11 incidents
| Date | Target | Summary | Classification | Source links |
|---|---|---|---|---|
| LEAK-933 | SpicyCompany | Unauthorized access from abroad was confirmed against the pure gold accumulation service "Minna no Junkin" operated by SpicyCompany. The cybersecurity specialist company, White Hacker Co., Ltd., responded and completely blocked the access. Investigations confirmed that there was no leakage of customer personal information. Security measures will continue to be strengthened in the future. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-941 | Niigata City | Niigata City's online application system (e-NIIGATA) experienced unauthorized access to its external email sending service, leading to a potential data leak of personal information. An investigation into the extent of the impact is ongoing, and some functions of the service are currently unavailable. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-946 | Demaekan Inc. | Unauthorized access occurred at "PickGo," operated by the contractor CBcloud, resulting in the leakage of 799 customer names, 794 addresses, and 33 phone numbers and postal codes. Credit card information and IDs/passwords were not leaked. Currently, no damage from unauthorized use has been confirmed. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-947 | Seven-Eleven Japan Co., Ltd. | CBcloud, which operates the delivery service "7NOW," experienced unauthorized access through "PickGo," resulting in the leakage of 164,180 customer names, 4,762 customer names and addresses, and 209 customer names, addresses, phone numbers, and postal codes. Credit card information and IDs/passwords were not leaked. Currently, 7NOW is operating normally, and no damage from unauthorized use has been confirmed. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-948 | Ministry of Internal Affairs and Communications | The Ministry of Internal Affairs and Communications established a study group on communication data protection in response to a large-scale data leak incident at a telecommunications company and held its first meeting. The meeting discussed the risks of information handled by telecommunications companies, technical countermeasures, governance, and system improvements. In particular, the case of KDDI was highlighted, where emails of 7,620,000 people became accessible, and thorough measures to prevent recurrence were demanded. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-949 | Seven-Eleven | Unauthorized access occurred at a contractor of Seven-Eleven, resulting in the leakage of approximately 169,151 customer records, according to reports. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-950 | Osaka City | It was reported that the email distribution service used in Osaka City's administrative online system was subject to unauthorized access, potentially leading to the leakage of user information. An investigation is currently underway regarding the possibility of a leak, and the specific number of affected records remains unconfirmed. | Unauthorized access & data leakPossibleOfficial statement | |
| LEAK-952 | EPOS Card | EPOS Card announced that there is a possibility that personal information was leaked due to recent unauthorized access. Customers are being informed about how to respond in case of unauthorized transactions or concerns about personal information leakage. EPOS Card promises to compensate for damages if unauthorized use is confirmed. Additionally, they are raising awareness about phishing scams. | Unauthorized access & data leakConfirmedOfficial statement | |
| LEAK-960 | Kyoto City | Unauthorized access occurred to the designated administrator of Kyoto City's Citizen Green Space, resulting in the potential leakage of personal information and the mass sending of spam emails to an unspecified number of recipients, according to reports. | Unauthorized access & data leakUnverified reportNews report | |
| LEAK-969 | Shirozaki Ko | In October 2026, a summary was organized of 17 major incidents of cyber damage publicly announced in Japan, which were confirmed through official statements. Reports indicated unauthorized access to contractors and breaches of APIs handling member information, with many incidents affecting external businesses. | Unauthorized access & data leakPossibleOfficial statement | |
| LEAK-972 | Takanezawa Town | Takanezawa Town announced that there was unauthorized access to the external email sending service used by its My Number card issuance reservation system, which may have led to the leakage of personal information. The potentially leaked information includes reservation numbers, dates of birth, email addresses, phone numbers, and reservation dates. An investigation is currently underway to determine the extent of the impact and the information that was leaked. | Unauthorized access & data leakPossibleOfficial statement |