JR Tokai Takashimaya: unauthorized access to the part-time staff system
On 8 May, JR Tokai Takashimaya, which runs the JR Nagoya Takashimaya department store, disclosed unauthorized access to the server that takes part-time job applications; it was detected on 1 May, with suspected ransomware. The additional findings on 24 July, including logs kept on the server since September 2015, put the number of people affected at 7,582, and said a vulnerability in server management software was most likely exploited. The data includes names, contact details and salary bank accounts. No sign of data being taken was found.
Disclosed
2026-05-08
Organizations involved
1
Leaked or at risk
7.6K
7,582
Downtime
Unknown
Timeline
- Detected 2026-05-01
- Disclosed 2026-05-08
- 7 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Aichi, Nagoya, NakamuraWholesale and retail trade7,582 leaked
Takashimaya, Central Japan Railway Co., Ltd.
Sources
- [1][Official]アルバイトスタッフ管理システム不正アクセスに関する追加調査結果のお知らせJR Tokai Takashimaya · 2026-07-24