LIXIL: break-in at the L-Pocket app for remodeling contractors leaked data of 3,379 registered users and staff

1. 2026-10-13

   A break-in at L-Pocket and L-Pocket Lite was detected and outside access was blocked. The app was taken out of service and off the app stores. [1]

2. 2026-10-19

   Public disclosure; affected people began to receive emails. [1]

3,379 people: registered users and staff of LIXIL and its group companies (including former staff), 375 of them staff. Names (with readings), email addresses, birth dates, genders, member numbers or registration codes, and their employer's name, address, phone number, department and industry. Payment data was not affected. [1]

No break-in to its core systems or internal network was found, and no data was altered or destroyed. No misuse had been found at the time of disclosure. [1]

The company reported to the Personal Information Protection Commission and other authorities. It will decide when to restart the app after rebuilding a safe environment. [1]