Japan Football Association: attack on the JFA Passport app
The Japan Football Association's official app JFA Passport was accessed by a third party from about 03:25 to 19:00 on 17 October. Working with the service provider, it blocked the route and stopped some system links, so parts of the app became unavailable. Its second report on 21 October said the attack attempting unauthorized access had not resulted in any confirmed personal data leakage. About 700,000 people are registered on the app.
Disclosed
2026-10-18
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started, Detected 2026-10-17
- Disclosed 2026-10-18
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Service outage]
- Entry point
- Unknown
Data exposed or at risk
–
Services hit
Organizations involved
[Breached][Moderate]Tokyo, BunkyoOther services
Japan Football Association
Sources
- [1][Official]【第2報】JFA公式アプリ「JFA Passport」への不正なアクセスを試みる攻撃に関する調査結果と今後の対応についてJFA · 2026-10-21
- [2][Official]JFA公式アプリ「JFA Passport」への不正アクセスについてJFA · 2026-10-18