Tokyo Metro: unauthorized access to the Metpo member service
Tokyo Metro's Metpo point program member service was accessed without authorization, and about 59,000 email addresses may have been viewed or taken. The server accessed held addresses whose mail had bounced and been stopped; no other member data was on it. According to the Mainichi Shimbun, a mail delivery problem on 20 September led it to find access apparently from abroad.
Disclosed
2026-09-27
Organizations involved
1
Leaked or at risk
59K
59,000
Downtime
Unknown
Timeline
- Detected 2026-09-20
- Disclosed 2026-09-27
- 7 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Major]Tokyo, TaitoTransport and postal services59,000 leaked
Tokyo Metro Co., Ltd.
Sources
- [1][Official]メトポ会員向けサービスにおける不正アクセス事案の発生について(お詫び)Tokyo Metro · 2026-09-27
- [2][News]東京メトロ、5.9万件のメールアドレス流出か 「メトポ」会員The Mainichi Shimbun · 2026-09-27