en: credential stuffing attack on the Middle no Tenshoku job site
On 5 June, en disclosed unauthorized access to its Middle no Tenshoku job site. Between 26 May and 2 June there were 2,503 logins with IDs and passwords apparently obtained elsewhere, detected on 2 June. Some members' account pages may have been accessed; passwords of all members were reset. No tampering was found.
Disclosed
2026-06-05
Organizations involved
1
Leaked or at risk
2.5K
2,503
Downtime
Unknown
Timeline
- Started 2026-05-26
- Detected 2026-06-02
- Disclosed 2026-06-05
- 10 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
–
Services hit
Organizations involved
[Breached][Major]Tokyo, ShinjukuOther services2,503 leaked
en Inc.
Sources
- [1][Official]「ミドルの転職」への不正アクセス発生に関するお詫びとご報告en · 2026-06-05