> JapanHacked_
[Investigating][Severity: Critical][Intrusion]

NTT Smile Energy: Eco Megane intrusion

Intruders reached the servers of Eco Megane, a remote monitoring service for solar power systems; customer data including login IDs and passwords may have leaked.

Disclosed

2026-10-29

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Signs of unauthorized access from outside were found on the Eco Megane web server. The service screens were stopped at 22:30. [1]

  2. The first notice went up on its website at 00:10. At 02:50 it cut traffic to all servers in its cloud environment and shut down the database server holding customer data. [1]

  3. It said the investigation found signs of an attack on the database server and that customer data may have leaked. [1]

Impact

Names or company names, addresses, phone numbers and email addresses of owners and partner companies, plus login IDs and passwords for the service, may have leaked. The number is being checked. The route and cause are not yet known. [1]

The solar systems themselves keep generating and selling power, but alert emails about faults are not sent and new installations cannot be registered. No restart date has been set. [1]

Response

It is investigating with outside specialists, will contact affected customers by email and other means, and warns of messages posing as the company. [1]

Timeline

  1. Started, Detected 2026-10-28
  2. Disclosed 2026-10-29
  3. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address][Passwords]

Services hit

Organizations involved

Sources

  1. [1][Official]太陽光発電遠隔監視サービス『エコめがね』サービスのシステム停止および個人情報漏洩の可能性に関するお詫びとお知らせNTT Smile Energy · 2026-10-30