> JapanHacked_
[Investigating][Severity: Major][Intrusion]

JP Union: break-in at a mail magazine system used until about 2019 may have leaked a list of over 40,000 members' addresses

A break-in at an old mail magazine system of the Japan Post Group Union leaked members' names, member numbers and email addresses.

Disclosed

2026-10-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

A PHP system used to send the union's mail magazine until about 2019 was broken into. The contractor that runs the union's website found it and reported it. [1]

Impact

A list of more than 40,000 mail magazine recipients may have leaked; the contractor is still counting. The leaked data are the subscribers' regional branch, name, member number, gender and email address. [1]

Response

The union cut the link between the mail magazine and the PHP system so nothing can be sent, and stopped asking about mail magazine subscriptions when members apply for an ID. Its current website does not use PHP, but some content linking to outside sites is being taken down until it is confirmed safe. It will report again when the review ends. [1]

Timeline

  1. Disclosed 2026-10-26
  2. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Gender][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]組合員情報漏えいに関するお詫びとお知らせJP Union · 2026-10-26