Crypton: unauthorized access to the SONICWIRE and D2R services
On 19 October, Crypton Future Media said its software instrument store SONICWIRE and related service D2R were accessed by a third party, and members' personal data may have been viewed and taken. It found possible unauthorized access at about 20:00 on 17 October, disabled compromised accounts and other measures, and shut down the servers late that night. Its 22 October update confirmed leaks of 362,137 SONICWIRE member records (names, emails, hashed passwords), 671 records entered for receipts and similar documents up to 19 November 2021 (company names, names, addresses, phone numbers) and 11 newsletter subscribers. It does not hold card data. Its initial possible-exposure maximum of about 420,000 SONICWIRE member and subscriber records remains the historical risk scope, distinct from the later confirmed categories.
Disclosed
2026-10-19
Organizations involved
1
Leaked or at risk
420K
420,000
Downtime
Unknown
Timeline
- Detected 2026-10-17
- Disclosed 2026-10-19
- 2 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Hokkaido, Sapporo, ChuoInformation and communications420,000 leaked
Crypton Future Media, Inc.
Sources
- [1][Official]不正アクセスによるお客様情報漏えいのお詫びとお知らせ(26/10/22更新)Crypton Future Media · 2026-10-19