Find incidents
Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
211 results
Disclosed 2026-10-20Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Globee: unauthorized access to systems behind the abceed English learning service[Misconfiguration][Data leak]Leaked 10.8KOrganizations 1Disclosed 2026-10-20Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Hakuhodo: unauthorized operation of the Housing Energy Saving 2024 campaign office system[Intrusion][Data leak][Service outage]Leaked 23.9KOrganizations 2Disclosed 2026-10-20Updated 2026-10-22Tokyo[Contained][Severity: Critical]
Aidma Holdings: unauthorized access to the Mamaworks remote job site[Misconfiguration][Data leak]Organizations 1Disclosed 2026-10-19Updated 2026-10-27 17:02Aichi, Fukuoka, Osaka, Saitama, Tokyo[Investigating][Severity: Critical]
Ymirlink: unauthorized access to the Cuenote FC email delivery service[Web app exploit][Data leak]Leaked 51.6MOrganizations 15Disclosed 2026-10-19Updated 2026-10-23Tokyo[Investigating][Severity: Major]
JETRO: unauthorized access to its websites[Intrusion][Data leak][Service outage]Leaked 743Organizations 1Disclosed 2026-10-19Updated 2026-10-23Tokyo[Investigating][Severity: Moderate]
SoftBank: member sites taken offline after an unauthorized access attempt on My SoftBank[Unknown][Service outage]Organizations 1Disclosed 2026-10-19Updated 2026-10-23Tokyo[Investigating][Severity: Moderate]
PAPYLESS: suspected unauthorized access; Renta! suspended[Unknown][Service outage]Organizations 1Disclosed 2026-10-19Updated 2026-10-23Tokyo[Contained][Severity: Major]
Japan Post Holdings: credential stuffing against Yu ID[Credential abuse][Data leak][Service outage]Leaked 249Organizations 1Disclosed 2026-10-19Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
NIFTY: unauthorized access to the line application management system[Intrusion][Data leak]Leaked 542.5KOrganizations 1Disclosed 2026-10-19Updated 2026-10-22Tokyo[Ongoing][Severity: Moderate]
Square Enix: unauthorized logins to Square Enix accounts[Credential abuse]Organizations 1Disclosed 2026-10-18Updated 2026-10-23Tokyo[Contained][Severity: Moderate]
Japan Football Association: attack on the JFA Passport app[Intrusion][Service outage]Organizations 1Disclosed 2026-10-16Updated 2026-10-27 19:58Aichi, Chiba, Fukushima, Hiroshima, Kochi, Miyagi, Nagano, Niigata, Tokyo, Toyama[Investigating][Severity: Critical]
Studio: unauthorized access to the cloud environment of the Studio website builder[Web app exploit][Data leak]Organizations 28Disclosed 2026-10-16Updated 2026-10-27 17:02Aichi, Ishikawa, Osaka, Tokyo[Investigating][Severity: Major]
WASABI: unauthorized access to the WASABI SWITCH order and inventory system[Intrusion][Data leak]Organizations 4Disclosed 2026-10-16Updated 2026-10-24 03:56Osaka, Tokyo[Contained][Severity: Critical]
Trade Works: unauthorized access leaks IwaiCosmo Securities customer data and places orders[Intrusion][Misconfiguration][Data leak][Fraud][Financial loss]Leaked 5KOrganizations 2Disclosed 2026-10-16Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Astemo: unauthorized access to its data sharing cloud[Credential abuse][Data leak][Extortion]Leaked 350Organizations 1Disclosed 2026-10-16Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Nikkei: unauthorized access to the cloud service it uses for system development[Credential abuse][Data leak]Leaked 1.8MOrganizations 1Disclosed 2026-10-15Updated 2026-10-26 18:29Tokyo[Contained][Severity: Critical]
Burger King: app member data leaked[Intrusion][Data leak]Leaked 11.2MOrganizations 1Disclosed 2026-10-15Updated 2026-10-26 18:29Tokyo[Contained][Severity: Critical]
Sourcenext: mass leak of member data[API abuse][Data leak]Leaked 22.5MOrganizations 1Disclosed 2026-10-15Updated 2026-10-23Tokyo[Investigating][Severity: Major]
M3: unauthorized access to the MR-kun service for drug makers[Intrusion][Data leak]Organizations 1Disclosed 2026-10-15Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Medley: unauthorized access to the @link clinic system[Intrusion][Malware][Service outage][Data leak]Organizations 1Disclosed 2026-10-15Updated 2026-10-22Tokyo[Contained][Severity: Critical]
Beauty Garage: unauthorized access to its online store[Intrusion][Data leak]Leaked 775.7KOrganizations 1Disclosed 2026-10-15Updated 2026-10-22Osaka, Tokyo[Investigating][Severity: Critical]
Daiwa Institute of Research: unauthorized access to Naito Securities' online trading system[Intrusion][Data leak]Leaked 631Organizations 2Disclosed 2026-10-14Updated 2026-10-23Tokyo[Resolved][Severity: Critical]
Aena: unauthorized access to its shopping app[Intrusion][Data leak]Leaked 817.2KOrganizations 1Disclosed 2026-10-13Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Fivot: unauthorized access to the IDARE cashless payment service[Web app exploit][Data leak]Leaked 129.7KOrganizations 1Disclosed 2026-10-13Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Golf Digest Online: unauthorized access to its servers[Intrusion][Data leak][Service outage]Leaked 1.8KOrganizations 1Disclosed 2026-10-13Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Ride On Express: ransomware at the server operator holding Gin no Sara customer data[Ransomware][Service outage][Data leak]Leaked 6.5MOrganizations 1Disclosed 2026-10-09Updated 2026-10-26 18:29Aomori, Hiroshima, Osaka, Shizuoka, Tokyo[Investigating][Severity: Critical]
Commune: unauthorized access to the Commune community platform[Intrusion][Data leak]Leaked 307KOrganizations 12Disclosed 2026-10-09Updated 2026-10-23Tokyo[Contained][Severity: Major]
coconala: unauthorized access to the coconala skill market[Web app exploit][Data leak]Leaked 1.8KOrganizations 1Disclosed 2026-10-09Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Adventure: unauthorized access to the skyticket back-office system[Intrusion][Data leak]Leaked 17.8KOrganizations 1Disclosed 2026-10-09Updated 2026-10-22Tokyo[Resolved][Severity: Major]
Adventure: skyticket bus booking pages viewable without login[Misconfiguration][Data leak]Leaked 12KOrganizations 1Disclosed 2026-10-09Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Adventure: unauthorized access to skyticket servers[Intrusion][Data leak]Leaked 14.6MOrganizations 1Disclosed 2026-10-08Updated 2026-10-26 18:29Tokyo[Investigating][Severity: Critical]
Nippon Columbia Group: malware on a Daiichikosho contractor's PC[Malware][Data leak]Leaked 8.7MOrganizations 2Disclosed 2026-10-08Updated 2026-10-26 18:25Tokyo[Contained][Severity: Moderate]
Gakken: group sites down after unauthorized access to an external server[Intrusion][Service outage]Organizations 3Disclosed 2026-10-08Updated 2026-10-23Tokyo[Contained][Severity: Critical]
hi-ho: competing sales agency logs in to customer pages[Phishing][Credential abuse][Data leak][Financial loss]Leaked 3.7KOrganizations 1Disclosed 2026-10-08Updated 2026-10-23Tokyo[Resolved][Severity: Critical]
Lawson: unauthorized access to Lawson ID and Lawson app pre-orders[Intrusion][Data leak]Leaked 2.2MOrganizations 1Disclosed 2026-10-08Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Uzabase: unauthorized access to an admin tool used by NewsPicks[Web app exploit][Data leak]Leaked 362KOrganizations 1Disclosed 2026-10-08Updated 2026-10-22Tokyo[Contained][Severity: Major]
hi-ho: impersonation logins to My Page[Phishing][Credential abuse][Data leak]Leaked 38.5KOrganizations 1Disclosed 2026-10-07Updated 2026-10-27 19:58Aichi, Fukuoka, Hiroshima, Ibaraki, Osaka, Tokyo[Ongoing][Severity: Critical]
IDC Frontier: ransomware attack on IDCF Cloud[Ransomware][Intrusion][Web app exploit][Service outage][Data leak]Leaked 4MOrganizations 495Disclosed 2026-10-07Updated 2026-10-22Tokyo[Contained][Severity: Critical]
H.I.S.: unauthorized access to its Thai subsidiary's file server[Intrusion][Data leak]Leaked 627Organizations 1Disclosed 2026-10-07Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Toda: unauthorized access to the payment system[Intrusion][Data leak]Leaked 7.2KOrganizations 1Disclosed 2026-10-06Updated 2026-10-23Tokyo[Contained][Severity: Critical]
dip: unauthorized access to the Baitoru and Baitoru NEXT job sites[Web app exploit][Data leak]Leaked 3.9MOrganizations 1Disclosed 2026-10-06Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Iyaku Joho Net: unauthorized access to Asahi Kasei Therapeutics' Pharma DIGITAL site for healthcare professionals[Intrusion][Data leak][Service outage]Leaked 514KOrganizations 2Disclosed 2026-10-06Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Rakuten Mobile: Rakuten Drive data exposed through compromised administrative credentials[Credential abuse][Data leak]Leaked 15.4KOrganizations 1Disclosed 2026-10-05Updated 2026-10-26 18:29Tokyo[Investigating][Severity: Critical]
Scala Communications: unauthorized access to the i-ask FAQ system[Credential abuse][Data leak]Leaked 713.1KOrganizations 6Disclosed 2026-10-05Updated 2026-10-23Osaka, Tokyo[Ongoing][Severity: Critical]
Osaka Metropolitan University: attack on an NEC contractor disrupts systems and exposes information[Ransomware][Credential abuse][Service outage][Data leak]Leaked 130KOrganizations 3Disclosed 2026-10-05Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
GMO Research & AI: unauthorized access to the infoQ survey site[Web app exploit][Data leak][Fraud][Service outage]Leaked 948.5KOrganizations 1Disclosed 2026-10-04Updated 2026-10-22Tokyo[Contained][Severity: Major]
Nikkei: unauthorized logins to an employee's Google Workspace account[Credential abuse][Data leak]Leaked 1.6KOrganizations 1Disclosed 2026-10-04Updated 2026-10-22Tokyo[Contained][Severity: Major]
Nikkei: Microsoft 365 account taken over and used for phishing emails[Credential abuse][Phishing][Data leak]Organizations 2Disclosed 2026-10-03Updated 2026-10-22Mie, Tokyo[Resolved][Severity: Major]
Recruit: registered email addresses identified through a flaw in StudySapuri[Web app exploit][Data leak]Leaked 3.7KOrganizations 3Disclosed 2026-10-02Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Abahouse International: unauthorized access to member and order data[Intrusion][Data leak][Fraud]Organizations 1