> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Tamanoya and Kigetsudo Celeo: unauthorized access to the funeral flower ordering systems

On 10 and 11 September, Cocolonet subsidiaries Tamanoya (Fukushima City) and Kigetsudo Celeo (Nirasaki, Yamanashi), both funeral companies, found unauthorized access to the online systems for ordering funeral flowers and offerings on their websites. They deleted the rogue accounts and blocked the source IP addresses. Names, addresses, phone numbers, emails and order details of customers may have leaked: about 10,400 records at Tamanoya and about 30 at Kigetsudo Celeo. No sign of data being taken was found, and the companies do not hold card data.

Disclosed

2026-10-20

Organizations involved

2

Leaked or at risk

10.4K

10,400

Downtime

Unknown

Timeline

  1. Detected 2026-09-10
  2. Disclosed 2026-10-20
  3. 40 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる個人情報流出の可能性に関するご報告とお詫びTamanoya · 2026-10-20
  2. [2][Official]不正アクセスによる個人情報流出の可能性に関するご報告とお詫びKigetsudo Celeo · 2026-10-20
  3. [3][Official]子会社における不正アクセスの発生及び個人情報漏洩の可能性に関するお知らせCocolonet · 2026-10-20
  4. [4][Official]連結子会社(孫会社)における不正アクセスの発生及び個人情報漏えいの可能性に関するお知らせSan Holdings · 2026-10-20