[Contained][Severity: Major][Intrusion][Misconfiguration]

Dentsu Soken: FACERE access-control error puts personal data at risk

Dentsu Soken found an intrusion into one FACERE customer environment caused by its access-control error. Personal data may have leaked; the scope is unknown.

Disclosed

2026-11-04

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

On 29 October Dentsu Soken found that its access-control error allowed outsiders to view stored data in one customer environment of its FACERE cloud service. Investigation identified unauthorized access on 10 September. It has not named the customer or disclosed data fields or counts. [1]

Response

It informed the customer, changed the settings and blocked the access route. Checks of all customer environments had found no other setting errors, misuse or secondary harm as of 3 November. It has not identified this as the same attack as its separately announced iPLAss Ver.2 case. [1]