> JapanHacked_
[Contained][Severity: Critical][Credential abuse]

Visual Arts: unauthorized access to its cloud storage

On 19 April, game company Visual Arts found the master data of its unreleased game anemoi uploaded without permission to an overseas website. The investigation found that credentials for the cloud storage used by its internal portal had been stolen, and internal data including the master data had most likely been taken. Its 4 June disclosure said separate groups may have leaked, covering customers, business partners, job applicants and employees: names, addresses, phone numbers, emails, birth dates, and for some My Number and ID document images. The stated groups were 6,017 and 2,626 customer records, 1,859 individual-partner records, 484 individual-partner records including My Numbers, 1,452 corporate-partner records, 1,007 applicant records and 114 employee-related records. It suspended new orders on its official online store. Its August 24 third report announced resumption of VA STORE orders from September 1 after authentication, monitoring and safety checks. Investigation and further measures across internal systems continued.

Disclosed

2026-06-04

Organizations involved

1

Leaked or at risk

6K

6,017

Downtime

Unknown

Timeline

  1. Detected 2026-04-19
  2. Disclosed 2026-06-04
  3. 46 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる社内情報および個人情報漏えいの可能性に関するお知らせとお詫びVisual Arts · 2026-06-04
  2. [2][Official]公式通販サイト「VA STORE」の営業再開に関するお知らせ(第3報)Visual Arts · 2026-08-24