> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Avance System: ANPIC safety confirmation service fully stopped after an external service was breached; later found no leak

ANPIC stopped all functions from 28 October after an external service it uses was breached. A university feared 5,300 addresses leaked; on 30 October no leak was reported.

Disclosed

2026-10-28

Organizations involved

2

Leaked or at risk

5.3K

5,300

Downtime

Unknown

What happened

  1. Avance System Co., Ltd. was told that an external service used by ANPIC had been accessed by a third party and stopped all ANPIC functions as a precaution. Automatic safety check mail after earthquakes also stopped, and customers were asked to confirm safety by other means. [1]

  2. Its second report said only email addresses might have leaked, not names, departments, phone numbers or LINE data, and that whether any addresses leaked was still being checked. [2]

  3. Iwate Prefectural University announced that about 5,300 university and private email addresses of students and staff registered in ANPIC might have leaked. The same day Avance System said the external provider had reported no leak in the environment ANPIC uses, and that it had confirmed with the Personal Information Protection Commission that no report was needed. [4] [5] [3]

Impact

The external service has not been named. According to Avance System's report of 30 October, no ANPIC customer data leaked in this incident. Mail-related functions stay stopped until the cause and safety are confirmed. [3]

Iwate Prefectural University is considering another system for safety checks in disasters while ANPIC is unavailable. [4]

Timeline

  1. Disclosed 2026-10-28
  2. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Service outage]
Entry point
Supplier

Data exposed or at risk

[E-mail address]

Supply chain

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]【重要】ANPICのサービス緊急停止のお知らせAvance System · 2026-10-28
  2. [2][Official]【第二報】ANPICのサービス停止および情報流出の可能性に関するご報告Avance System · 2026-10-29
  3. [3][Official]【重要】ANPIC 外部サービスにおける情報漏えいに関する調査結果のご報告Avance System · 2026-10-30
  4. [4][News]学生や教職員のメールアドレス約5300件 岩手県立大で情報漏えいの可能性TV Iwate · 2026-10-30 16:31
  5. [5][News]岩手県立大学でメールアドレス約5300件流出か 安否確認システムの連携先に不正アクセスIBC Iwate Broadcasting · 2026-10-30 18:17