FABRIC TOKYO: access key leaked via a contractor opens a test system; data of 699 past reservation holders at risk
A key probably leaked from a contractor was used to reach a test system. Names and contact details of 699 people who booked fittings in May–July 2021 may have been viewed or taken.
Disclosed
2026-11-11
Organizations involved
1
Leaked or at risk
699
699
Downtime
Unknown
People affected or at risk
699
699
What happened
An access key for a test system very likely leaked from an outside contractor, and on 29 October it was used to access the system. The company found this on 2 November and disabled the key the same day. The production system was not breached, and member data is not involved. [1]
Past fitting-reservation data left in the test system for 699 people who booked from May to July 2021 (name, email, phone and reservation time; email and phone only for some) may have been viewed or taken. A preliminary report went to the Personal Information Protection Commission. [1]
Timeline
- Started 2026-10-29
- Detected 2026-11-02
- Disclosed 2026-11-11
- 13 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ShibuyaWholesale and retail trade699 leaked
FABRIC TOKYO Inc.
Sources
- [1][Official]一部システムへの不正アクセスに伴う個人情報流出の可能性についてFABRIC TOKYO Inc. · 2026-11-11