FC Tokyo: rogue content and redirects on the official website
On 26 October, Tokyo Football Club, which runs FC Tokyo, said part of its official website (under /panorama/) showed rogue content and redirected visitors to outside sites from 19:53 on 13 September until 11:00 on 26 October. No server intrusion has been found and no personal data leak has been found. It asks anyone who viewed the pages during that time to take care.
Disclosed
2026-10-26
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started 2026-09-13
- Detected, Disclosed 2026-10-26
- 43 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Site defacement]
- Entry point
- Web app
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Tokyo, KotoPersonal services and entertainment
Tokyo Football Club Co., Ltd.
Sources
- [1][Official]【重要】当クラブ公式ホームページにおける不正な表示・転送に関するお知らせとお願いTokyo Football Club · 2026-10-26