dip: unauthorized access to the Baitoru and Baitoru NEXT job sites
On 6 October, dip found unauthorized access to some functions of its Baitoru and Baitoru NEXT job sites. The access came from overseas and exploited a flaw in how part of the system was specified; up to 3,885,771 member email addresses leaked. Names, phone numbers, passwords and card data were not included. dip blocked all overseas access and fixed the program. Members were notified on both sites on October 6; the corporate notice followed on October 9.
Disclosed
2026-10-06
Organizations involved
1
Leaked or at risk
3.9M
3,885,771
Downtime
Unknown
Timeline
- Detected, Disclosed 2026-10-06
- 1 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, MinatoInformation and communications3,885,771 leaked
dip Corporation
Sources
- [1][Official]「バイトル」「バイトルNEXT」不正アクセスによる一部メールアドレス漏えいに関するお知らせとお詫びdip · 2026-10-09
- [2][News]「バイトル」会員メアド最大約389万件漏えい 海外から「仕様不備」突く不正アクセスITmedia NEWS · 2026-10-10