Yasukuni Shrine: intrusion into its online shop leaks about 14,500 member records with password hashes
An intrusion into the shrine’s online shop leaked about 14,500 records of names, email addresses and salted password hashes. The site has been stopped since 28 October.
Disclosed
2026-11-11
Organizations involved
1
Leaked or at risk
14.5K
14,500
Downtime
Unknown
What happened
On 28 October the shrine found that its online shop for amulets and other items had been accessed without authorization, and it stopped the site the same day. It is investigating with the site’s management company. [1]
About 14,500 records leaked, with members’ names, email addresses, password hashes and salts, and account management data such as registration time and status. The count is still under investigation. No leak of card data, addresses, phone numbers, birth dates or purchase history has been confirmed. No reopening date has been set. [1] [2]
Mailing contractor
The same day the shrine also reported the intrusion at its mailing contractor (RAKUS Light Cloud: blastmail intrusion leaks customer mailing data; basic functions reopen on 11 November); no leak has been confirmed there. [3]
Timeline
- Detected 2026-10-28
- Disclosed 2026-11-11
- 14 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, ChiyodaOther services14,500 leaked
Yasukuni Shrine
Sources
- [1][Official]靖國神社オンライン授与品・頒布品サイトへの不正アクセスによる個人情報漏洩のお詫びとお知らせYasukuni Shrine · 2026-11-11
- [2][News]靖国神社に不正アクセス 約1万4500件の個人情報漏えい、パスワードが特定されるおそれもITmedia · 2026-11-11
- [3][Official]メールマガジン等の配信委託先における不正アクセスについてYasukuni Shrine · 2026-11-11