> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

dip: unauthorized access to the Baitoru and Baitoru NEXT job sites

On 6 October, dip found unauthorized access to some functions of its Baitoru and Baitoru NEXT job sites. The access came from overseas and exploited a flaw in how part of the system was specified; up to 3,885,771 member email addresses leaked. Names, phone numbers, passwords and card data were not included. dip blocked all overseas access and fixed the program. Members were notified on both sites on October 6; the corporate notice followed on October 9.

Disclosed

2026-10-06

Organizations involved

1

Leaked or at risk

3.9M

3,885,771

Downtime

Unknown

Timeline

  1. Detected, Disclosed 2026-10-06
  2. 1 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[E-mail address]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]「バイトル」「バイトルNEXT」不正アクセスによる一部メールアドレス漏えいに関するお知らせとお詫びdip · 2026-10-09
  2. [2][News]「バイトル」会員メアド最大約389万件漏えい 海外から「仕様不備」突く不正アクセスITmedia NEWS · 2026-10-10