Sukesan: a setting error at contractor Kaho Enterprise may have left staff and former staff data in its attendance system open to outsiders

1. 2026-10-09

   Contractor Kaho Enterprise found a setting error in the attendance system during its own check and told Sukesan. [3]

2. 2026-10-27

   Sukesan disclosed the case. The setting was fixed so outsiders can no longer view the data, and the Personal Information Protection Commission was informed. [1] [3]

Names, birth dates, genders, phone numbers, pay histories and attendance records of staff and former staff employed between October 2021 and October 2026; for some, also start and end dates, reasons for leaving and social insurance history. The Nikkei put the number at about 20,000. [1] [2]

Whether anyone accessed the data could not be determined. The company says no attack was involved, and no misuse had been found at the time of disclosure. [2] [3]

Affected people are being contacted, and the notice stands in for former staff who cannot be reached. Because phone numbers are included, the company warned of suspicious calls and texts posing as Sukesan or the authorities. It says it will check contractors' settings and oversee their data handling more closely. [1]