Zynas: cyberattack on Joyfull's HR contractor
On 29 January, Zynas, which handles work for the Joyfull restaurant chain, found that a server it had set up to pass data to a subcontractor had been accessed and part of its database deleted. Data on 23,585 Joyfull employees, job applicants and their family members may have leaked, from interview and hiring documents: names, addresses, birth dates, medical history, salary accounts and more (the number of people differs by item).
Disclosed
2026-03-26
Organizations involved
2
Leaked or at risk
23.6K
23,585
Downtime
Unknown
Timeline
- Detected 2026-01-29
- Disclosed 2026-03-26
- 56 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
Organizations involved
[Through a supplier][Critical]Oita, OitaAccommodation, food and drink23,585 leaked
Joyfull Co., Ltd.[Breached][Critical]Oita, OitaInformation and communications
Zynas Corporation
Sources
- [1][Official]当社が取り扱うジョイフル従業員、求職者及びその関係者の個人情報漏えいのおそれについてZynas · 2026-03-26