> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Tokyo Metro: unauthorized access to the Metpo member service

Tokyo Metro's Metpo point program member service was accessed without authorization, and about 59,000 email addresses may have been viewed or taken. The server accessed held addresses whose mail had bounced and been stopped; no other member data was on it. According to the Mainichi Shimbun, a mail delivery problem on 20 September led it to find access apparently from abroad.

Disclosed

2026-09-27

Organizations involved

1

Leaked or at risk

59K

59,000

Downtime

Unknown

Timeline

  1. Detected 2026-09-20
  2. Disclosed 2026-09-27
  3. 7 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[E-mail address]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]メトポ会員向けサービスにおける不正アクセス事案の発生について(お詫び)Tokyo Metro · 2026-09-27
  2. [2][News]東京メトロ、5.9万件のメールアドレス流出か 「メトポ」会員The Mainichi Shimbun · 2026-09-27