Tamanoya and Kigetsudo Celeo: unauthorized access to the funeral flower ordering systems
On 10 and 11 September, Cocolonet subsidiaries Tamanoya (Fukushima City) and Kigetsudo Celeo (Nirasaki, Yamanashi), both funeral companies, found unauthorized access to the online systems for ordering funeral flowers and offerings on their websites. They deleted the rogue accounts and blocked the source IP addresses. Names, addresses, phone numbers, emails and order details of customers may have leaked: about 10,400 records at Tamanoya and about 30 at Kigetsudo Celeo. No sign of data being taken was found, and the companies do not hold card data.
Disclosed
2026-10-20
Organizations involved
2
Leaked or at risk
10.4K
10,400
Downtime
Unknown
Timeline
- Detected 2026-09-10
- Disclosed 2026-10-20
- 40 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Major]Yamanashi, NirasakiPersonal services and entertainment30 leaked
Kigetsudo Celeo Co., Ltd.[Breached][Major]Fukushima, FukushimaPersonal services and entertainment10,400 leaked
Tamanoya Co., Ltd.
Sources
- [1][Official]不正アクセスによる個人情報流出の可能性に関するご報告とお詫びTamanoya · 2026-10-20
- [2][Official]不正アクセスによる個人情報流出の可能性に関するご報告とお詫びKigetsudo Celeo · 2026-10-20
- [3][Official]子会社における不正アクセスの発生及び個人情報漏洩の可能性に関するお知らせCocolonet · 2026-10-20
- [4][Official]連結子会社(孫会社)における不正アクセスの発生及び個人情報漏えいの可能性に関するお知らせSan Holdings · 2026-10-20