> JapanHacked_
[Investigating][Severity: Major][Unknown]

Starks: unauthorized access to the Metabase analytics server behind Cloudlogi may have leaked API keys and personal data

The Metabase server used by Starks' logistics service Cloudlogi was accessed without authorization, and API keys for integrations leaked.

Disclosed

2026-10-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The first report disclosed unauthorized access to the Metabase server and leaked integration API keys; personal data may also have leaked. [1]

  2. The second report said the production servers show no sign of intrusion and the service is running. [2]

Impact

The number of records is under investigation. [2]

Response

A forensic survey is being prepared. It filed a preliminary report with the Personal Information Protection Commission. [2]

Timeline

  1. Disclosed 2026-10-26
  2. 1 days

Attack or cause

Method
[Unknown]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Passwords]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]Metabaseへの不正アクセスに関するご報告およびクラウドロジご利用に関するご案内（第一報）Starks · 2026-10-26
  2. [2][Official]Metabaseへの不正アクセスに関するご報告およびクラウドロジご利用に関するご案内（第二報）Starks · 2026-10-28