Trustbank: unauthorized access to Furusato Choice
Attackers accessed member data of Furusato Choice, the hometown tax donation site run by Trustbank, on 17 October. Names, email addresses, addresses, phone numbers, hashed passwords and estimated tax deductions of 4,454,097 member records leaked. Trustbank noticed unusual access on 19 October and stopped the related services at 15:50 that day. It is fixing the vulnerability it found.
Disclosed
2026-10-20
Organizations involved
1
Leaked or at risk
4.5M
4,454,097
Downtime
Unknown
Timeline
- Started 2026-10-17
- Detected 2026-10-19
- Disclosed 2026-10-20
- 3 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, MinatoInformation and communications
Trustbank, Inc.
Sources
- [1][Official]不正アクセスによる寄附者様情報の外部流出に関するお詫びとお知らせTrustbank · 2026-10-20