Spiral LOCAS: unauthorized access to the municipal staff call-up system
On October 22, Akiruno City disclosed unauthorized access to its account on a staff call-up system operated by Spiral LOCAS. Staff names, employee numbers, departments, passwords and emails leaked; resident information was excluded. The city requested investigation and prevention measures. Chunichi reported that the attacked staff-safety service was used by two municipalities; the company's roughly 650 municipal customers are not a count of affected municipalities. No affected-record count was published.
Disclosed
2026-10-22
Organizations involved
2
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Disclosed 2026-10-22
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
Organizations involved
[Through a supplier][Critical]Tokyo, AkirunoMunicipality
Akiruno City[Breached][Critical]Aichi, Nagoya, NakamuraInformation and communications
Spiral LOCAS Inc.
Sources
- [1][Official]職員参集システムにおける職員情報の漏えいについてAkiruno City · 2026-10-22
- [2][News]全国約650自治体に情報共有サービス、名古屋市のIT企業にサイバー攻撃The Chunichi Shimbun · 2026-10-23