> JapanHacked_
[Investigating][Severity: Critical][Unknown]

Macromill: intrusion into its monitor site exposed data of 317 panelists, bank details for 82

An intrusion into the survey monitor site exposed basic and profile data of 317 panelists, with bank details for 82. Point exchange is stopped for all panelists.

Disclosed

2026-11-12

Organizations involved

1

Leaked or at risk

317

317

Downtime

Unknown

People affected or at risk

317

317

What happened

Macromill, Inc. said on 12 November that an outsider accessed part of the system behind its Macromill monitor site for survey panelists. It found the intrusion on 29 October and stopped point exchange at once. The investigation found traces that the basic data and registered profile data of 317 panelists were viewed from outside, including the payout bank account details of 82. [1] [2]

Some accounts saw attempts to change the registered email or exchange points, but no exchange or money loss has been confirmed. The company holds no card data or PINs, and no access to other panelists’ data was found. Separately, the outside email service it uses for notices and verification was stopped by an attack on 31 October, and the missing emails also keep point exchange stopped. It sent first reports to the Personal Information Protection Commission and the Privacy Mark body. [1] [2]

Timeline

  1. Detected 2026-10-29
  2. Disclosed 2026-11-12
  3. 14 days

Attack or cause

Method
[Unknown]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

[Bank account]

Services hit

Organizations involved

Sources

  1. [1][Official]不正アクセスによる個人情報の漏えいおよびマクロミルポイント交換機能の一時停止に関するお詫びとお知らせMacromill · 2026-11-12
  2. [2][Official]不正アクセスによる個人情報の漏えいおよびマクロミルポイント交換機能の一時停止に関するお詫びとお知らせMacromill