Iwatake Resort: a malicious file was planted on its website server, and the names and addresses of 3,154 customers who used its web forms may have leaked

1. 2025-05-10

   It was contacted by the cloud server provider hosting its website, investigated and confirmed the unauthorized access. [1]

2. 2025-07-02

   It reported to the Personal Information Protection Commission. [1]

3. 2025-07-23

   A third-party investigation found that personal data in the database may have leaked, and it announced the incident. [1] [2]

The names, addresses, phone numbers and email addresses of 3,154 customers who used the inquiry, job application and reservation forms from August 2, 2018 to May 13, 2025 are covered. The cause was a malicious file placed on the server and run. The site has reopened with stronger security. [1] [2]