Career Design Center: a credential-stuffing attack on the "Onna no Tenshoku type" job site led to 38,442 unauthorized logins by 18,253 users
A credential-stuffing attack on the job site "Onna no Tenshoku type" logged into 38,442 accounts (18,253 users); member pages may have been viewed.
Disclosed
2026-05-30
Organizations involved
1
Leaked or at risk
18.3K
18,253
Downtime
Unknown
What happened
A credential-stuffing attack, apparently using credentials obtained elsewhere, began. It continued until May 28. [1] [2]
It announced the unauthorized logins. There were 1,141,828 attempts, of which 38,442 logins (18,253 users) succeeded, and some member information pages may have been viewed. [1] [2]
It published its investigation results. The forensic investigation and the internal investigation did not differ. [3]
Timeline
- Started 2026-05-26
- Detected 2026-05-28
- Disclosed 2026-05-30
- 4 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, MinatoOther services18,253 leaked
Career Design Center Co., Ltd.Member accounts were logged into through a credential-stuffing attack and member pages may have been viewed.
Sources
- [1][Official]転職サイト『女の転職 type』における不正アクセス発生によるお客様の個人情報流出の可能性のお知らせとお詫びについてCareer Design Center Co., Ltd. · 2026-05-30
- [2][News]「女の転職 type」にリスト型アカウントハッキング、不正ログイン 38,442 件にScanNetSecurity · 2026-06-12 08:05
- [3][News]「女の転職 type」にリスト型アカウントハッキング、フォレンジック調査と社内調査に内容の相違なしScanNetSecurity · 2026-07-02 08:05