> JapanHacked_
[Contained][Severity: Major][Intrusion][Misconfiguration]

Awa Bank: unauthorized access to an OA system test environment

On 24 March, an outside security firm told Awa Bank that its data might be leaking; the bank confirmed it on 25 March. A test environment of its internal information-sharing system had been accessed, and 27,745 records leaked in total, including 10,872 corporate internet banking clients and 11,122 shareholders. The follow-up on 3 June named the causes: customer data was not deleted after development finished, and protection against unauthorized access did not work well enough.

Disclosed

2026-04-03

Organizations involved

1

Leaked or at risk

27.7K

27,745

Downtime

Unknown

Timeline

  1. Detected 2026-03-24
  2. Disclosed 2026-04-03
  3. 10 days

Attack or cause

Method
[Intrusion][Misconfiguration]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address][Employment]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによるお客さま情報等の漏えい発生についてThe Awa Bank · 2026-04-03
  2. [2][Official]不正アクセスによるお客さま情報等の漏えい発生について(続報)The Awa Bank · 2026-06-03