Money Forward: unauthorized access to its GitHub
Attackers used leaked credentials to access GitHub, which Money Forward uses to manage source code, and copied repositories. The first report came on 1 May. The fourth report on 23 June finished the review: data in the repositories that may have leaked covers names or emails of 124 customers, 28 business partners, names, emails and phone numbers of 2,300 employees (including former ones), and internal IDs of 60,449 customers that do not identify anyone on their own. The production database holding customer data was not accessed.
Disclosed
2026-05-01
Organizations involved
1
Leaked or at risk
60.4K
60,449
Downtime
Unknown
Timeline
- Disclosed 2026-05-01
- 1 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, MinatoInformation and communications60,449 leaked
Money Forward, Inc.
Sources
- [1][Official]GitHubへの不正アクセスに関するお知らせ(第一報)Money Forward · 2026-05-01
- [2][Official]GitHubへの不正アクセスに関する詳細調査の完了およびセキュリティ対策強化のお知らせ(第四報)Money Forward · 2026-06-23