Rakuten Mobile: Rakuten Drive data exposed through compromised administrative credentials

On October 6, Rakuten Drive disclosed access using administrative account credentials acquired by a third party. Two August 27 scopes cover 687 accounts' account names, display names and profile-image URLs, and 313 accounts with those fields plus encrypted passwords and associated hardening strings. A further scope covers stored photos/documents of 15,382 accounts accessed January 29–September 17. No deduplicated total across scopes was published. The access route was blocked, with new account issuance and app downloads restricted.