Lawson Entertainment: marathon entrants and emergency contacts’ data at risk
Intrusion into LAWSON DO! SPORTS’ iPLAss environment may expose 89 Tokorozawa marathon entrants and 89 emergency contacts. Wider scope is undisclosed.
Disclosed
2026-11-06
Organizations involved
2
Leaked or at risk
178
178
Downtime
Unknown
People affected or at risk
178
178
What happened
Tokorozawa received Lawson Entertainment’s report on 5 November and disclosed it the next day. Unauthorized access affected an iPLAss system used by LAWSON DO! SPORTS. Potentially exposed data includes 89 marathon entries with names, gender, addresses, birth dates, phones and emails, and 89 emergency contacts’ names and phones, stated as 178 people in total. Neither the service-wide count nor the attack date is disclosed. [1]
Response and confirmed scope
The city reports that the access route was blocked and no subsequent intrusion was found. The affected system stored no card details, other payment information or passwords. No misuse or secondary harm is confirmed; individual notifications are planned. No common attack with the separate FACERE case has been established. [1]
Timeline
- Disclosed 2026-11-06
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
- Organizations listed on this site
- 2
Services hit
Organizations involved
[Through a supplier][Major]Saitama, TokorozawaMunicipality178 leaked
Tokorozawa City[Breached][Major]Tokyo, ShinagawaWholesale and retail trade178 leaked
Lawson Entertainment, Inc.178 is the disclosed Tokorozawa cohort, not the service-wide total.
Sources
- [1][Official]第37回所沢シティマラソン大会エントリー受付業者における個人情報の漏えいについて(11月6日発表)Tokorozawa City · 2026-11-06