Commune: unauthorized access to the Commune community platform
The Commune and Commune for Work community platforms were accessed without authorization from the evening of 5 October; data of about 307,000 members may have leaked. Users of Yamaha, Suzuki, LY Corporation, Sansan, Panasonic, Aomori Prefecture and others are affected. On October 12 Yamaha Motor said names, birth dates, gender, addresses, email addresses and more of about 1,600 members of its YAMAHA PAS Life e-bike community may have leaked. Email addresses and account names of about 1,600 members of a Yamaha engineer community were also affected. Mazda said on October 14 that member IDs, email addresses, usage history, survey answers and more of up to 4,103 members and staff of its CLUB MAZDA COMMUNITY may have been viewed.
Disclosed
2026-10-09
Organizations involved
12
Leaked or at risk
307K
307,000
Downtime
Unknown
Timeline
- Started 2026-10-05
- Disclosed 2026-10-09
- 4 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
Services hit
Organizations involved
[Breached][Critical]Tokyo, ShinagawaInformation and communications307,000 leaked
Commune Inc.[Through a supplier][Major]Aomori, AomoriPrefecture
Aomori Prefectural Government[Through a supplier][Major]Tokyo, ChiyodaInformation and communications1,750 leaked
LY CorporationMembers of its DS.LAB community.
[Through a supplier][Major]Hiroshima, FuchuManufacturing4,103 leaked
Mazda Motor CorporationUp to 4,103 members and staff of CLUB MAZDA COMMUNITY.
[Through a supplier][Major]Osaka, KadomaManufacturing5,000 leaked
Panasonic CorporationMember data, email addresses included, of about 2,000 LUMIX Community members and about 3,000 members of the Panasonic Beauty hair care community.
[Through a supplier][Major]Shizuoka, HamamatsuManufacturing
Suzuki Motor Corporation[Through a supplier][Major]Shizuoka, IwataManufacturing1,600 leaked
Yamaha Motor Co., Ltd.About 1,600 members of YAMAHA PAS Life.
[Through a supplier][Major]Tokyo, MinatoPersonal services and entertainment1,694 leaked
Bandai Namco Experience Inc.Members of the Wangan Midnight Arcade Portal.
[Through a supplier][Major]Tokyo, ItabashiManufacturing1,800 leaked
Koike-ya Inc.Members of its Koikeya GOGO! Land fan site.
[Through a supplier][Major]Tokyo, MinatoManufacturing291 leaked
Morinaga Milk Industry Co., Ltd.Members of its Mount Cafe club.
Sources
- [1][News]「コミューン」不正アクセスでLINEヤフー、Sansan、パナソニックでも会員情報漏えいの可能性ITmedia NEWS · 2026-10-10
- [2][Official]『湾岸ミッドナイト アーケードポータル』への不正アクセスによる会員情報漏洩の可能性に関するお詫びと臨時メンテナンス継続のお知らせ(10/14更新)Bandai Namco Experience · 2026-10-14
- [3][Official]委託先事業者に対する不正アクセスによるお客様情報の漏えいについてKoike-ya · 2026-10-13
- [4][Official]委託先システムへの不正アクセスによる 「マウントカフェ部」会員情報漏洩に関するお詫びとお知らせMorinaga Milk Industry · 2026-10-09
- [5][News]ヤマハ・スズキも漏えいか 交流サイト基盤「コミューン」不正アクセス、計30万会員に影響の恐れITmedia NEWS · 2026-10-09
- [6][Official]外部委託先への不正アクセスによるお客様情報漏えいの可能性についてYamaha Motor · 2026-10-12
- [7][Official]外部委託先への不正アクセスによるお客様情報漏えいについてYamaha · 2026-10-09
- [8][News]ヤマハとヤマハ発動機、SNS会員の情報流出か 計3200人分Nikkei · 2026-10-13
- [9][Official]当社コミュニティサービスサイト「CLUB MAZDA COMMUNITY」への不正アクセスに関するお知らせとお詫びMazda · 2026-10-14
- [10][Official]外部委託先への不正アクセスによる当社コミュニティ会員情報の漏えいについてPanasonic · 2026-10-09