Business Tech: unauthorized access to Ashikaga City's crematorium booking system
On October 15 the crematorium booking system that Business Tech of Hitachinaka, Ibaraki provides to Ashikaga City was accessed from outside without authorization. A funeral business reported that bookings failed, and the investigation found unauthorized database queries and text added to the notice section. On October 18 Ashikaga said about 8,800 records of users since December 1, 2022 (name, birth date, address and gender of the deceased; name, address and phone of the applicant) and the company names, addresses, phones and email addresses of 56 registered funeral businesses may have leaked; on October 20 it put the count at 8,827. Business Tech stopped the same system for all 20 municipalities and municipal unions it serves in Tochigi, Ibaraki, Saitama, Gunma and Niigata, and their crematoriums take bookings by phone. No damage outside Ashikaga has been found.
Disclosed
2026-10-18
Organizations involved
2
Leaked or at risk
8.8K
8,827
Downtime
Unknown
Timeline
- Detected 2026-10-15
- Disclosed 2026-10-18
- 3 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
Organizations involved
[Breached][Critical]Ibaraki, HitachinakaInformation and communications
Business Tech Inc.[Through a supplier][Major]Tochigi, AshikagaMunicipality8,827 leaked
Ashikaga City8,827 crematorium user records (about 8,800 at first) and data of 56 funeral businesses.
Sources
- [1][Official]斎場予約システムへの不正アクセス及び個人情報漏洩のおそれに関するお詫びとお知らせBusiness Tech · 2026-10-18
- [2][Official]「足利市斎場予約システム」における不正アクセスに伴う個人情報の漏えいのおそれについてAshikaga City · 2026-10-18
- [3][News]サイバー攻撃受け斎場予約システム停止 死者の情報など漏れた可能性The Asahi Shimbun · 2026-10-19
- [4][News]足利・市斎場予約の情報 8827件など漏えいか 委託先へ不正アクセスThe Tokyo Shimbun · 2026-10-20
- [5][News]不正アクセス 茨城県内11斎場 対応追われる システム停止 予約、電話で受け付けThe Ibaraki Shimbun · 2026-10-21