Mitsui Fudosan: unauthorized access to a system used by the group
On 28 August, Mitsui Fudosan confirmed unauthorized access to a system used by its group. Credentials for the system were misused and a third party may have viewed some of its data: names, emails, departments and job titles of up to 19,000 group officers and employees, and emails and display names of up to 36,000 outside contacts. No leak of business data such as mail or files, or of passwords, was found. It disabled the credentials, reviewed all accounts and stepped up monitoring.
Disclosed
2026-09-01
Organizations involved
1
Leaked or at risk
36K
36,000
Downtime
Unknown
Timeline
- Detected 2026-08-28
- Disclosed 2026-09-01
- 4 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChuoReal estate and rental36,000 leaked
Mitsui Fudosan Co., Ltd.
Sources
- [1][Official]不正アクセスによる情報漏えいの可能性について(第二報)Mitsui Fudosan · 2026-09-28
- [2][Official]不正アクセスによる情報漏えいの可能性についてMitsui Fudosan · 2026-09-01