Find incidents
Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
574 results
Disclosed 2026-10-27Updated 2026-10-27 19:58Tokyo[Investigating][Severity: Critical]
Sony Network Communications: unauthorized access to the So-net member database leaks data of about 2.59 million members[Intrusion][Data leak]Leaked 2.6MOrganizations 1Disclosed 2026-10-27Updated 2026-10-27 17:02Tokyo[Investigating][Severity: Major]
Basic: unauthorized access to the ferret One marketing platform[Web app exploit][Data leak]Organizations 1Disclosed 2026-10-27Updated 2026-10-27 17:02Tokyo[Contained][Severity: Major]
Hiroshima Gakuin Junior and Senior High School: unauthorized access to Microsoft 365 accounts[Credential abuse][Phishing][Data leak]Organizations 1Disclosed 2026-10-27Updated 2026-10-27 17:02Tokyo[Contained][Severity: Major]
Smartshare: unauthorized access to the OWNLY SNS campaign tool leaks Mos campaign entrants' data[Web app exploit][Data leak]Leaked 14KOrganizations 2Disclosed 2026-10-27Updated 2026-10-27 17:02Osaka[Investigating][Severity: Moderate]
URBAN RESEARCH: official X account taken over[Unknown][Site defacement]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 17:02Tokyo[Ongoing][Severity: Moderate]
Lawson: unauthorized access at the contractor running the app pre-order store search[Unknown][Service outage]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 17:02Tokyo[Investigating][Severity: Major]
Sonicmoov: unauthorized access to the COMSBI Enterprise platform[Credential abuse][Data leak][Service outage]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 14:31Tokyo[Investigating][Severity: Critical]
Doutor Coffee: unauthorized access; employee data may have leaked[Intrusion][Data leak]Leaked 951Organizations 1Disclosed 2026-10-26Updated 2026-10-27 14:31Tokyo[Resolved][Severity: Moderate]
FC Tokyo: rogue content and redirects on the official website[Web app exploit][Site defacement]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 14:31Kanagawa[Investigating][Severity: Major]
Furukawa Electric Power Systems: unauthorized access to the web shipping system[Intrusion][Data leak]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 14:31Tokyo[Contained][Severity: Major]
Tokuma Shoten Publishing: unauthorized access to the GoodsPress Web test environment[Intrusion][Data leak][Site defacement]Leaked 103Organizations 1Disclosed 2026-10-26Updated 2026-10-27 14:31Iwate[Contained][Severity: Critical]
Wiseman: unauthorized access to the MeLL+professional care service[Credential abuse][Service outage]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 14:31Hyogo[Investigating][Severity: Major]
Yomisen WEST: unauthorized access to the Shikoku branch's Yomipost site[Intrusion][Data leak]Leaked 1.7KOrganizations 1Disclosed 2026-10-26Updated 2026-10-27 08:40Tokyo[Investigating][Severity: Critical]
Bandai Logipal: unauthorized access; Ichiban Kuji ONLINE delivery data may have leaked[Intrusion][Credential abuse][Data leak][Service outage]Organizations 2Disclosed 2026-10-26Updated 2026-10-27 08:40Tokyo[Contained][Severity: Critical]
giftee: unauthorized access to its system and fraudulent e-gift issuance[Web app exploit][Fraud][Financial loss]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 08:40Tokyo[Contained][Severity: Critical]
Rakuten Group: unauthorized access to Rakuten Travel's overseas hotel pages and multilingual booking site[Intrusion][Data leak]Leaked 2.6MOrganizations 1Disclosed 2026-10-26Updated 2026-10-26 12:51Oita[Investigating][Severity: Moderate]
cotta: possible unauthorized access to the baking supplies online shop[Intrusion][Service outage]Organizations 1Disclosed 2026-10-24Updated 2026-10-26 12:51Tokyo[Contained][Severity: Critical]
Chariloto: unauthorized access to the Chariloto keirin and auto race betting app[Web app exploit][Data leak][Service outage]Leaked 373Organizations 1Disclosed 2026-10-24Updated 2026-10-25 00:41Tokyo[Investigating][Severity: Critical]
IGREKS: unauthorized access to the Y-mail email delivery service[Intrusion][Credential abuse][Data leak][Service outage]Organizations 1Disclosed 2026-10-23Updated 2026-10-27 08:40Tokyo[Investigating][Severity: Major]
Good Smile Company: unauthorized access to the Official Shop[Web app exploit][Data leak][Service outage]Organizations 1Disclosed 2026-10-23Updated 2026-10-26 12:51Tokyo[Contained][Severity: Critical]
Nihon Seirei: unauthorized access to the AI Lab 225 stock forecast site[Intrusion][Malware][Data leak]Leaked 19.6KOrganizations 1Disclosed 2026-10-23Updated 2026-10-26 12:51Tokyo[Contained][Severity: Critical]
Valuedesign: unauthorized access to the Value Card house e-money service[Intrusion][Web app exploit][Data leak]Leaked 1.4MOrganizations 2Disclosed 2026-10-23Updated 2026-10-25 00:41Tokyo[Investigating][Severity: Critical]
NEXCO EAST: unauthorized access to the Doratora expressway information site[Intrusion][Data leak]Organizations 1Disclosed 2026-10-23Updated 2026-10-25 00:41Tokyo[Investigating][Severity: Major]
Travel Zip: unauthorized access at the operator of Taito City's TAITO Odekake Navi tourism site[Intrusion][Data leak]Leaked 5.5KOrganizations 2Disclosed 2026-10-23Updated 2026-10-25 00:41Tokyo[Investigating][Severity: Critical]
Tokio Marine X: possible unauthorized access to the contract management system[Intrusion][Service outage]Organizations 1Disclosed 2026-10-23Updated 2026-10-24 03:51Tokyo[Investigating][Severity: Moderate]
Tokyo Waterworks Bureau: four external hard drives holding personal data lost[Lost device][Data leak]Leaked 1.9KOrganizations 1Disclosed 2026-10-23Updated 2026-10-23Ibaraki[Contained][Severity: Critical]
and ST HD: unauthorized access to business servers[Intrusion][Data leak][Service outage]Leaked 2.5MOrganizations 1Disclosed 2026-10-23Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Commerble: unauthorized access to the GALLERY·2 online shop through its EC platform[Credential abuse][Misconfiguration][Data leak][Service outage]Leaked 128KOrganizations 2Disclosed 2026-10-23Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Green Monster: user data taken through the FX Navi demo trading app API[API abuse][Data leak]Leaked 6.2MOrganizations 1Disclosed 2026-10-23Updated 2026-10-23Tokyo[Contained][Severity: Major]
Nippon Gas: unauthorized access to the My Nichigas sign-up system[API abuse][Data leak]Leaked 85Organizations 1Disclosed 2026-10-23Updated 2026-10-23Osaka[Contained][Severity: Critical]
Panasonic Operational Excellence: HR data uploaded to an outside generative AI service[Insider][Data leak]Leaked 334KOrganizations 1Disclosed 2026-10-23Updated 2026-10-23Kanagawa[Investigating][Severity: Critical]
Pizza Hut: unauthorized access to the online ordering payment API[API abuse][Data leak]Leaked 4.5MOrganizations 1Disclosed 2026-10-23Updated 2026-10-23Shizuoka[Investigating][Severity: Moderate]
TOKAI Holdings: suspected unauthorized access attempt; TLC member services suspended[Unknown][Service outage]Organizations 1Disclosed 2026-10-23Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Treasure Factory: unauthorized access to the case management system for home pickup and moving[Web app exploit][Data leak][Service outage]Leaked 746.3KOrganizations 1Disclosed 2026-10-23Updated 2026-10-23Gunma[Investigating][Severity: Moderate]
Yamada Denki: unauthorized access to the Yamada Video and Smartphone Gold membership procedure pages[Intrusion][Service outage]Organizations 1Disclosed 2026-10-22Updated 2026-10-27 17:02Tokyo[Contained][Severity: Critical]
KOMOJU: unauthorized access to payment and CRM systems[Intrusion][Data leak][Service outage]Leaked 4.1KOrganizations 1Disclosed 2026-10-22Updated 2026-10-27 17:02Ehime, Tokyo[Investigating][Severity: Major]
Level Enter: unauthorized access to the AI.R-Scorer essay scoring service[Web app exploit][Data leak]Organizations 2Disclosed 2026-10-22Updated 2026-10-27 17:02Aichi[Investigating][Severity: Major]
System5: unauthorized access to a system linked to the online shop[Web app exploit][Data leak][Service outage]Leaked 15.7KOrganizations 1Disclosed 2026-10-22Updated 2026-10-27 14:31Tokyo[Investigating][Severity: Critical]
VALTEC: unauthorized access; customer data may have leaked[Web app exploit][Malware][Data leak][Service outage]Organizations 1Disclosed 2026-10-22Updated 2026-10-23Osaka[Contained][Severity: Critical]
Capcom: unauthorized access to the CAPCOM ID member service[Intrusion][Data leak]Leaked 11.8MOrganizations 1Disclosed 2026-10-22Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Goldenway Japan: FXTF trading credentials stolen through an attack on an external VPS[Credential abuse][Data leak][Fraud]Organizations 1Disclosed 2026-10-22Updated 2026-10-23Tokyo[Investigating][Severity: Moderate]
Lintec: unauthorized access to some systems[Intrusion]Organizations 1Disclosed 2026-10-22Updated 2026-10-23Okinawa[Contained][Severity: Moderate]
Okinawa Prefecture: unauthorized access to the administrative document catalog[Intrusion][Service outage]Organizations 1Disclosed 2026-10-22Updated 2026-10-23Tokyo[Contained][Severity: Major]
Speee: unauthorized logins to group partner dashboards[Credential abuse][Data leak]Leaked 3.8KOrganizations 2Disclosed 2026-10-22Updated 2026-10-23Aichi, Tokyo[Investigating][Severity: Critical]
Spiral LOCAS: unauthorized access to the municipal staff call-up system[Intrusion][Data leak]Organizations 2Disclosed 2026-10-22Updated 2026-10-22Hyogo[Investigating][Severity: Major]
Fujicco: unauthorized access at its campaign entry contractor[Intrusion][Data leak]Leaked 15.5KOrganizations 1Disclosed 2026-10-22Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Net Protections: unauthorized access to the NP Atobarai invoice reissue system[API abuse][Data leak]Leaked 28.9KOrganizations 1Disclosed 2026-10-21Updated 2026-10-27 20:41Tokyo[Investigating][Severity: Critical]
Recruit: unauthorized access to Carsensor.net and C-MATCH[Intrusion][Data leak][Service outage]Leaked 3.7MOrganizations 1Disclosed 2026-10-21Updated 2026-10-27 19:58Aichi, Fukuoka, Hiroshima, Iwate, Kagawa, Miyagi, Nagano, Niigata, Osaka, Tochigi, Tokyo, Toyama[Investigating][Severity: Critical]
RAKUS Light Cloud: unauthorized access to the blastmail email delivery service[Intrusion][Data leak][Service outage]Organizations 345Disclosed 2026-10-21Updated 2026-10-27 19:58Tokyo[Investigating][Severity: Critical]
GMO Internet: unauthorized access to Onamae.com Desktop Cloud[Intrusion][Malware][Data leak][Service outage][Fraud][Extortion][Financial loss]Organizations 5