> JapanHacked_
[Resolved][Severity: Critical][Misconfiguration]

Komatsu: misconfigured external user directory

On 16 June, Komatsu said that, because of a misconfiguration in the system it uses to invite external users to apps, online meetings and file sharing, the names, emails, user types and some access times of 139,302 registered users could be seen by other registered users of the same system. This may have been the case since around 2021. It was found on 23 April and the setting was changed. The data was not visible to the general internet.

Disclosed

2026-06-16

Organizations involved

1

Leaked or at risk

139.3K

139,302

Downtime

Unknown

Timeline

  1. Detected 2026-04-23
  2. Disclosed 2026-06-16
  3. 54 days

Attack or cause

Method
[Misconfiguration]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]個人情報が閲覧可能な状態にあったことに関するお知らせKomatsu · 2026-06-16