Ryobi Systems: AITEL health checkup booking system intrusion
Someone logged in to the AITEL health checkup booking system as a user and reached data of other users; names, birth dates and other data in 778 records leaked.
Disclosed
2026-10-30
Organizations involved
1
Leaked or at risk
778
778
Downtime
Unknown
What happened
A login that appears to have impersonated a user account was found. From that account, data of other users was reached beyond its permissions. [1]
Ryobi Systems published the incident. [1]
Impact
- 5 records at 3 client bodies: names and kana, gender, birth dates, phone numbers, email addresses, postal codes and addresses (with booking details for 1) may have leaked. [1]
- 773 records at 1 client body: names and kana, gender, birth dates and email addresses (728 records) leaked. [1]
No medical data such as checkup results is included, and there is no sign that passwords leaked. [1]
Response
Ryobi Systems stopped the affected function and accounts and consulted the police and the ministries concerned. [1]
Timeline
- Detected 2026-10-27
- Disclosed 2026-10-30
- 3 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Major]Okayama, Okayama, MinamiInformation and communications778 leaked
Ryobi Systems Co., Ltd.
Sources
- [1][Official]健診予約システム「AITEL」における不正アクセスによる個人情報漏えいに関するお知らせとお詫びRyobi Group · 2026-10-30