> JapanHacked_
[Contained][Severity: Major][Intrusion]

Lawson Entertainment: marathon entrants and emergency contacts’ data at risk

Intrusion into LAWSON DO! SPORTS’ iPLAss environment may expose 89 Tokorozawa marathon entrants and 89 emergency contacts. Wider scope is undisclosed.

Disclosed

2026-11-06

Organizations involved

2

Leaked or at risk

178

178

Downtime

Unknown

People affected or at risk

178

178

What happened

Tokorozawa received Lawson Entertainment’s report on 5 November and disclosed it the next day. Unauthorized access affected an iPLAss system used by LAWSON DO! SPORTS. Potentially exposed data includes 89 marathon entries with names, gender, addresses, birth dates, phones and emails, and 89 emergency contacts’ names and phones, stated as 178 people in total. Neither the service-wide count nor the attack date is disclosed. [1]

Response and confirmed scope

The city reports that the access route was blocked and no subsequent intrusion was found. The affected system stored no card details, other payment information or passwords. No misuse or secondary harm is confirmed; individual notifications are planned. No common attack with the separate FACERE case has been established. [1]

Timeline

  1. Disclosed 2026-11-06
  2. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Gender][Postal address][Date of birth][Phone number][E-mail address]

Supply chain

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]第37回所沢シティマラソン大会エントリー受付業者における個人情報の漏えいについて(11月6日発表)Tokorozawa City · 2026-11-06