> JapanHacked_
[Contained][Severity: Major][Web app exploit]

T museum: Unko Museum website tampered with

On 14 August, the website of the Unko Museum entertainment venue said it was partly tampered with through unauthorized access exploiting a vulnerability in third-party software, and names, emails, phone numbers and messages of 4 people who used the contact form from 17:04 on 10 August to 11:24 on 11 August may have leaked. By 11 August it removed the planted files, restored the tampered parts and fixed the vulnerability. The site is run jointly by T museum and KAYAC.

Disclosed

2026-08-14

Organizations involved

2

Leaked or at risk

4

4

Downtime

Unknown

Timeline

  1. Started 2026-08-10
  2. Disclosed 2026-08-14
  3. 4 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak][Site defacement]
Entry point
Web app

Data exposed or at risk

[Name][E-mail address][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][News]「うんこミュージアム」公式サイト改ざん被害、個人情報4人分流出のおそれITmedia NEWS · 2026-08-17