> JapanHacked_
[Contained][Severity: Major][Intrusion][Web app exploit]

LENDY Servicing: negotiation-record system breached; data on 211 Okinawa Bank customers may leak

An outsider created an account and viewed repayment-negotiation records. Data on 211 Okinawa Bank customers may have leaked, including contacts and amounts. The system is isolated.

Disclosed

2026-11-06

Organizations involved

2

Leaked or at risk

211

211

Downtime

Unknown

Affected system and information

On 30 October an outsider created an unauthorized account in LENDY Servicing’s negotiation-record checker and viewed records. Outside extraction is considered likely; 211 Okinawa Bank Checkit customers are affected. Potential fields are names, emails, phones, representatives such as lawyers, repayment-consultation amounts and negotiation contents, in whole or part. Inclusion of each field is being checked. [1]

Controls restricting outside registration and each user’s accessible data were inadequate. The company disabled accounts, terminated sessions, stopped registration and isolated/stopped the system. This is an auxiliary system, rather than the main debt-management/collection system. No misuse-related harm is confirmed. [1]

Timeline

  1. Started 2026-10-30
  2. Disclosed 2026-11-06
  3. 7 days

Supply chain

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]個人ローン商品「チェキット」にかかる個人情報の漏えいに関するお詫びとお知らせThe Bank of Okinawa · 2026-11-06