ielove GROUP: unauthorized access to the ielove CLOUD real estate service
On 5 April data leaked from ielove GROUP's cloud service for real estate agencies, starting from unauthorized access and a system vulnerability; it was detected and blocked on 6 April. The attackers most likely stole client agencies' account credentials with infostealers. The data may include part of the exchanges between home seekers and agencies (names, emails, phone numbers, addresses, wishes), and the company found it very likely linked to data posted on an outside site. Many agencies using the service disclosed their own impact.
Disclosed
2026-04-08
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started 2026-04-05
- Detected 2026-04-06
- Disclosed 2026-04-08
- 3 days
Attack or cause
- Method
- [Credential abuse][Web app exploit]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Services hit
Organizations involved
[Breached][Major]Tokyo, ShinjukuInformation and communications
ielove GROUP Inc.
Sources
- [1][Official]【第二報】当社のクラウドサービスへの不正アクセスに関する調査状況および今後の対応についてielove GROUP · 2026-04-30