Akindo Sushiro: part-timer portal breached, 1,117 employee numbers leaked
Sushiro’s portal for part-time staff was accessed without authorization and 1,117 employee numbers, including former staff, leaked. The admin password had been guessed.
Disclosed
2026-11-05
Organizations involved
1
Leaked or at risk
1.1K
1,117
Downtime
Unknown
What happened
According to its parent FOOD & LIFE COMPANIES, the portal site for part-time staff of Akindo Sushiro Co., Ltd. was accessed without authorization on 8–9 October. The access was detected on 30 October; the site was taken private and reopened on 31 October after countermeasures and checks. On 2 November it emerged that pages listing employee numbers had been viewed and 1,117 numbers, including those of former staff, had leaked. The cause was a guessed administrator password, and the privacy regulator has been notified. No misuse has been confirmed. [1]
Timeline
- Started 2026-10-08
- Detected 2026-10-30
- Disclosed 2026-11-05
- 28 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Moderate]Osaka, SuitaAccommodation, food and drink1,117 leaked
Akindo Sushiro Co., Ltd.
Sources
- [1][Official]アルバイト・パート従業員向けポータルサイトへの不正アクセスによる従業員番号漏えいに関するお詫びとお知らせFOOD & LIFE COMPANIES · 2026-11-05