T museum: Unko Museum website tampered with
On 14 August, the website of the Unko Museum entertainment venue said it was partly tampered with through unauthorized access exploiting a vulnerability in third-party software, and names, emails, phone numbers and messages of 4 people who used the contact form from 17:04 on 10 August to 11:24 on 11 August may have leaked. By 11 August it removed the planted files, restored the tampered parts and fixed the vulnerability. The site is run jointly by T museum and KAYAC.
Disclosed
2026-08-14
Organizations involved
2
Leaked or at risk
4
4
Downtime
Unknown
Timeline
- Started 2026-08-10
- Disclosed 2026-08-14
- 4 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak][Site defacement]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Major]Kanagawa, KamakuraInformation and communications4 leaked
KAYAC Inc.[Breached][Major]Tokyo, ShibuyaPersonal services and entertainment4 leaked
T museum Inc.
Sources
- [1][News]「うんこミュージアム」公式サイト改ざん被害、個人情報4人分流出のおそれITmedia NEWS · 2026-08-17