> JapanHacked_
[Contained][Severity: Major][Credential abuse]

Money Forward: unauthorized access to its GitHub

Attackers used leaked credentials to access GitHub, which Money Forward uses to manage source code, and copied repositories. The first report came on 1 May. The fourth report on 23 June finished the review: data in the repositories that may have leaked covers names or emails of 124 customers, 28 business partners, names, emails and phone numbers of 2,300 employees (including former ones), and internal IDs of 60,449 customers that do not identify anyone on their own. The production database holding customer data was not accessed.

Disclosed

2026-05-01

Organizations involved

1

Leaked or at risk

60.4K

60,449

Downtime

Unknown

Timeline

  1. Disclosed 2026-05-01
  2. 1 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]GitHubへの不正アクセスに関するお知らせ(第一報)Money Forward · 2026-05-01
  2. [2][Official]GitHubへの不正アクセスに関する詳細調査の完了およびセキュリティ対策強化のお知らせ(第四報)Money Forward · 2026-06-23