Kobayashi: server data stolen

Unauthorized server access and theft of internal data were confirmed on November 4. No encryption or operational shutdown occurred, and ordering and shipping were unaffected. The company investigated with external specialists and notified authorities. No misuse was confirmed; its notice did not specify data fields or a count. The January 21, 2026 final report confirmed theft and publication of some information and identified a leaked-or-potentially-leaked scope of 8,149 records: 4,984 applicants, 91 individual businesses and 3,074 employees or former employees, with some My Number identifiers and bank details. It did not establish individual exfiltration of every record. The affected system was retired and misuse was unconfirmed.