NTT Smile Energy: Eco Megane intrusion
Intruders reached the servers of Eco Megane, a remote monitoring service for solar power systems; customer data including login IDs and passwords may have leaked.
Disclosed
2026-10-29
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Signs of unauthorized access from outside were found on the Eco Megane web server. The service screens were stopped at 22:30. [1]
The first notice went up on its website at 00:10. At 02:50 it cut traffic to all servers in its cloud environment and shut down the database server holding customer data. [1]
It said the investigation found signs of an attack on the database server and that customer data may have leaked. [1]
Impact
Names or company names, addresses, phone numbers and email addresses of owners and partner companies, plus login IDs and passwords for the service, may have leaked. The number is being checked. The route and cause are not yet known. [1]
The solar systems themselves keep generating and selling power, but alert emails about faults are not sent and new installations cannot be registered. No restart date has been set. [1]
Response
It is investigating with outside specialists, will contact affected customers by email and other means, and warns of messages posing as the company. [1]
Timeline
- Started, Detected 2026-10-28
- Disclosed 2026-10-29
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Osaka, Osaka, NishiInformation and communications
NTT Smile Energy Inc.
Sources
- [1][Official]太陽光発電遠隔監視サービス『エコめがね』サービスのシステム停止および個人情報漏洩の可能性に関するお詫びとお知らせNTT Smile Energy · 2026-10-30