> JapanHacked_
[Investigating][Severity: Major][Credential abuse][Web app exploit]

ielove GROUP: unauthorized access to the ielove CLOUD real estate service

On 5 April data leaked from ielove GROUP's cloud service for real estate agencies, starting from unauthorized access and a system vulnerability; it was detected and blocked on 6 April. The attackers most likely stole client agencies' account credentials with infostealers. The data may include part of the exchanges between home seekers and agencies (names, emails, phone numbers, addresses, wishes), and the company found it very likely linked to data posted on an outside site. Many agencies using the service disclosed their own impact.

Disclosed

2026-04-08

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Started 2026-04-05
  2. Detected 2026-04-06
  3. Disclosed 2026-04-08
  4. 3 days

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]【第二報】当社のクラウドサービスへの不正アクセスに関する調査状況および今後の対応についてielove GROUP · 2026-04-30