> JapanHacked_
[Investigating][Severity: Major][API abuse]

Net Protections: unauthorized access to the NP Atobarai invoice reissue system

On 14 October, Net Protections found that its NP Atobarai deferred payment service's invoice reissue system had received automated, continuous requests in an unexpected way, and some customer data was accessed. 28,884 transactions are affected: names and addresses, plus company and department names for business use. The system will reopen after safety checks; NP Atobarai itself kept running.

Disclosed

2026-10-22

Organizations involved

1

Leaked or at risk

28.9K

28,884

Downtime

Unknown

Timeline

  1. Detected 2026-10-14
  2. Disclosed 2026-10-22
  3. 8 days

Attack or cause

Method
[API abuse]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Postal address]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]「NP後払い」への不正アクセスについてNet Protections · 2026-10-22