> JapanHacked_
[Contained][Severity: Moderate][Credential abuse]

Akindo Sushiro: part-timer portal breached, 1,117 employee numbers leaked

Sushiro’s portal for part-time staff was accessed without authorization and 1,117 employee numbers, including former staff, leaked. The admin password had been guessed.

Disclosed

2026-11-05

Organizations involved

1

Leaked or at risk

1.1K

1,117

Downtime

Unknown

What happened

According to its parent FOOD & LIFE COMPANIES, the portal site for part-time staff of Akindo Sushiro Co., Ltd. was accessed without authorization on 8–9 October. The access was detected on 30 October; the site was taken private and reopened on 31 October after countermeasures and checks. On 2 November it emerged that pages listing employee numbers had been viewed and 1,117 numbers, including those of former staff, had leaked. The cause was a guessed administrator password, and the privacy regulator has been notified. No misuse has been confirmed. [1]

Timeline

  1. Started 2026-10-08
  2. Detected 2026-10-30
  3. Disclosed 2026-11-05
  4. 28 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Member or customer ID][Employment]

Organizations involved

Sources

  1. [1][Official]アルバイト・パート従業員向けポータルサイトへの不正アクセスによる従業員番号漏えいに関するお詫びとお知らせFOOD & LIFE COMPANIES · 2026-11-05