Yakult Honsha: unauthorized access to its website leaks about 40,000 personal records
Yakult Honsha's website was accessed without authorization, and about 40,000 records leaked, including contact form users and members of its school-lunch site.
Disclosed
2026-10-26
Organizations involved
1
Leaked or at risk
40K
40,000
Downtime
Unknown
What happened
Unauthorized access to the website was found, and its functions were shut down. [1] [2]
The second report disclosed that about 40,000 records leaked. [1] [2]
Impact
- Users of the contact form [1] [2]
- Members of the school-lunch site Tanoshii Kyushoku, including encrypted passwords [1] [2]
- Users of the press contact form [1] [2]
- Staff who answered the enquiries [1] [2]
- Names, addresses, phone numbers, emails, enquiry text and more. It holds no card or bank data. [1] [2]
Timeline
- Detected, Disclosed 2026-10-26
- 1 days
Attack or cause
- Method
- [Unknown]
- Impact
- [Data leak][Service outage]
- Entry point
- Web app
Data exposed or at risk
Services hit
Member data and encrypted passwords.
Organizations involved
[Breached][Major]Tokyo, MinatoManufacturing40,000 leaked
Yakult Honsha Co., Ltd.
Sources
- [1][Official]当社ホームページへの不正アクセスによる個人情報漏えいに関するお詫びとお知らせ【第２報】Yakult Honsha · 2026-10-30
- [2][News]ヤクルト本社、顧客情報約4万件が流出 不正アクセスでNikkei · 2026-10-30