Net Protections: unauthorized access to the NP Atobarai invoice reissue system
On 14 October, Net Protections found that its NP Atobarai deferred payment service's invoice reissue system had received automated, continuous requests in an unexpected way, and some customer data was accessed. 28,884 transactions are affected: names and addresses, plus company and department names for business use. The system will reopen after safety checks; NP Atobarai itself kept running.
Disclosed
2026-10-22
Organizations involved
1
Leaked or at risk
28.9K
28,884
Downtime
Unknown
Timeline
- Detected 2026-10-14
- Disclosed 2026-10-22
- 8 days
Attack or cause
- Method
- [API abuse]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Major]Tokyo, ChiyodaFinance and insurance28,884 leaked
Net Protections, Inc.
Sources
- [1][Official]「NP後払い」への不正アクセスについてNet Protections · 2026-10-22