> JapanHacked_
[Contained][Severity: Major][Credential abuse]

FABRIC TOKYO: access key leaked via a contractor opens a test system; data of 699 past reservation holders at risk

A key probably leaked from a contractor was used to reach a test system. Names and contact details of 699 people who booked fittings in May–July 2021 may have been viewed or taken.

Disclosed

2026-11-11

Organizations involved

1

Leaked or at risk

699

699

Downtime

Unknown

People affected or at risk

699

699

What happened

An access key for a test system very likely leaked from an outside contractor, and on 29 October it was used to access the system. The company found this on 2 November and disabled the key the same day. The production system was not breached, and member data is not involved. [1]

Past fitting-reservation data left in the test system for 699 people who booked from May to July 2021 (name, email, phone and reservation time; email and phone only for some) may have been viewed or taken. A preliminary report went to the Personal Information Protection Commission. [1]

Timeline

  1. Started 2026-10-29
  2. Detected 2026-11-02
  3. Disclosed 2026-11-11
  4. 13 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Supplier

Data exposed or at risk

[Name][E-mail address][Phone number]

Organizations involved

Sources

  1. [1][Official]一部システムへの不正アクセスに伴う個人情報流出の可能性についてFABRIC TOKYO Inc. · 2026-11-11