[Contained][Severity: Critical][Credential abuse]

Wiseman: unauthorized access to the MeLL+professional care service

On 26 October, Wiseman, which makes systems for nursing care and medical providers, said its cloud service MeLL+professional was accessed on 24 October with improperly obtained credentials. It also stopped related services, including the MeLL+community and MeLL+family provider systems and family app, the AI voice recording option, SOIN integration, CareRepo and second-line. The misused credentials have been invalidated. No leak has been confirmed, but the investigation continues, and it has reported to the Personal Information Protection Commission and the regulators.

Disclosed

2026-10-26

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

Started, Detected 2026-10-24
Disclosed 2026-10-26
2 days

Attack or cause

Method: [Credential abuse]
Impact: [Service outage]
Entry point: Stolen credentials

Data exposed or at risk

–

Services hit

[Breached][Critical]
MeLL+

Service	Role	Impact level	Note
MeLL+	[Breached]	[Critical]

Organizations involved

[Breached][Critical]Iwate, MoriokaInformation and communications
Wiseman Co., Ltd.

						Note
Wiseman Co., Ltd.	[Breached]	[Critical]	Iwate, Morioka	Information and communications	Unknown

Open in organization search

Sources

[1][Official]「MeLL+professional（メルタスプロフェッショナル）」への不正アクセスの発生に関するお詫びとお知らせWiseman · 2026-10-26