> JapanHacked_
[Contained][Severity: Major][Credential abuse]

Mitsui Fudosan: unauthorized access to a system used by the group

On 28 August, Mitsui Fudosan confirmed unauthorized access to a system used by its group. Credentials for the system were misused and a third party may have viewed some of its data: names, emails, departments and job titles of up to 19,000 group officers and employees, and emails and display names of up to 36,000 outside contacts. No leak of business data such as mail or files, or of passwords, was found. It disabled the credentials, reviewed all accounts and stepped up monitoring.

Disclosed

2026-09-01

Organizations involved

1

Leaked or at risk

36K

36,000

Downtime

Unknown

Timeline

  1. Detected 2026-08-28
  2. Disclosed 2026-09-01
  3. 4 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[Name][E-mail address][Employment]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる情報漏えいの可能性について(第二報)Mitsui Fudosan · 2026-09-28
  2. [2][Official]不正アクセスによる情報漏えいの可能性についてMitsui Fudosan · 2026-09-01