> JapanHacked_
[Resolved][Severity: Major][Intrusion][Malware]

Fukuvi Chemical Industry: overseas websites intrusion

Malicious remote-control programs were planted on building materials maker Fukuvi's English sites for overseas, and data of 3 site admins was viewed. No customer data was involved.

Disclosed

2026-09-28

Organizations involved

1

Leaked or at risk

3

3

Downtime

Unknown

What happened

  1. The first intrusion hit its English sites for overseas on a rental server (fvc.fukuvi-jp.com, ftc.fukuvi-jp.com, fukuvikenzai.com and fandaline.fukuvi-jp.com), and malicious remote-control programs were planted. [1]

  2. Fukuvi found the intrusion and stopped all the sites. [1]

  3. It issued its first notice. [1]

  4. It issued its final report. [1]

Impact

The profiles of 3 site admins (login names, display names, company email addresses and password hashes) were viewed. No customer data was involved, and its core systems were not affected. [1]

Response

Fukuvi told the staff concerned and reported to the Personal Information Protection Commission. [1]

Timeline

  1. Started 2026-09-02
  2. Detected 2026-09-16
  3. Disclosed 2026-09-28
  4. 26 days

Attack or cause

Method
[Intrusion][Malware]
Impact
[Data leak][Service outage]
Entry point
Web app

Data exposed or at risk

[Name][E-mail address][Passwords]

Organizations involved

Sources

  1. [1][Official]第三者の不正アクセスによるシステム障害に関するお知らせ【最終報】Fukuvi Chemical Industry · 2026-10-29