Komatsu: misconfigured external user directory
On 16 June, Komatsu said that, because of a misconfiguration in the system it uses to invite external users to apps, online meetings and file sharing, the names, emails, user types and some access times of 139,302 registered users could be seen by other registered users of the same system. This may have been the case since around 2021. It was found on 23 April and the setting was changed. The data was not visible to the general internet.
Disclosed
2026-06-16
Organizations involved
1
Leaked or at risk
139.3K
139,302
Downtime
Unknown
Timeline
- Detected 2026-04-23
- Disclosed 2026-06-16
- 54 days
Attack or cause
- Method
- [Misconfiguration]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, MinatoManufacturing139,302 leaked
Komatsu Ltd.
Sources
- [1][Official]個人情報が閲覧可能な状態にあったことに関するお知らせKomatsu · 2026-06-16