> JapanHacked_
[Contained][Severity: Moderate][Intrusion]

Japan Football Association: attack on the JFA Passport app

The Japan Football Association's official app JFA Passport was accessed by a third party from about 03:25 to 19:00 on 17 October. Working with the service provider, it blocked the route and stopped some system links, so parts of the app became unavailable. Its second report on 21 October said the attack attempting unauthorized access had not resulted in any confirmed personal data leakage. About 700,000 people are registered on the app.

Disclosed

2026-10-18

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Started, Detected 2026-10-17
  2. Disclosed 2026-10-18
  3. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]【第2報】JFA公式アプリ「JFA Passport」への不正なアクセスを試みる攻撃に関する調査結果と今後の対応についてJFA · 2026-10-21
  2. [2][Official]JFA公式アプリ「JFA Passport」への不正アクセスについてJFA · 2026-10-18