> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

JR Tokai Takashimaya: unauthorized access to the part-time staff system

On 8 May, JR Tokai Takashimaya, which runs the JR Nagoya Takashimaya department store, disclosed unauthorized access to the server that takes part-time job applications; it was detected on 1 May, with suspected ransomware. The additional findings on 24 July, including logs kept on the server since September 2015, put the number of people affected at 7,582, and said a vulnerability in server management software was most likely exploited. The data includes names, contact details and salary bank accounts. No sign of data being taken was found.

Disclosed

2026-05-08

Organizations involved

1

Leaked or at risk

7.6K

7,582

Downtime

Unknown

Timeline

  1. Detected 2026-05-01
  2. Disclosed 2026-05-08
  3. 7 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Phone number][Bank account][Employment][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][Official]アルバイトスタッフ管理システム不正アクセスに関する追加調査結果のお知らせJR Tokai Takashimaya · 2026-07-24