> JapanHacked_
[Contained][Severity: Critical][Credential abuse]

NTV Wands: unauthorized login to the admin screen of the FaveConnect fan club platform; member data of 117,392 accounts in two fan clubs may have been viewed

Someone logged in to an admin account of the FaveConnect fan club platform; names, addresses and more of 117,392 member accounts of two fan clubs may have been viewed.

Disclosed

2026-10-14

Organizations involved

1

Leaked or at risk

117.4K

117,392

Downtime

Unknown

What happened

  1. Until 13 October, a third party logged in to the fan club operators' admin screen with an admin account and viewed member data. [1]

  2. The suspicious access was noticed; the account used was deleted and the source blocked. [1]

  3. Disclosed. [1]

Impact

117,392 accounts of members of the Takane no Nadeshiko official fan club and the HEROINES official website, plus former members who left within the past six months: names, email addresses, addresses, phone numbers, occupations, birth dates and gender. Payment data such as card numbers is not included. [1]

No direct break-in to the database server and no altered data were found. Every action taken on the admin screen has been identified, and no other FaveConnect service was hit the same way. [1]

Response

Fixes were put in place so the same method no longer works. Reports, including to the Personal Information Protection Commission, are under way. [1]

Timeline

  1. Started 2026-10-11
  2. Detected 2026-10-13
  3. Disclosed 2026-10-14
  4. 3 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address][Postal address][Phone number][Date of birth][Gender][Employment]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]「FaveConnect」への不正アクセスによる個人情報閲覧の可能性についてNTV Wands · 2026-10-14