Find incidents
Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
211 results
Disclosed 2026-10-02Updated 2026-10-23Tokyo[Resolved][Severity: Major]
National Tax Agency: other people's gift tax returns visible in e-Tax My Page[Misconfiguration][Data leak]Leaked 203Organizations 1Disclosed 2026-10-02Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Japan Times: ransomware attack on the group's former administrative server[Ransomware][Data leak]Organizations 2Disclosed 2026-10-02Updated 2026-10-23Tokyo[Investigating][Severity: Major]
JOGMEC: unauthorized access to its information systems[Intrusion][Data leak]Leaked 7.4KOrganizations 1Disclosed 2026-10-02Updated 2026-10-22Tokyo[Resolved][Severity: Critical]
Sammy Networks: unauthorized access to 777CON-PASS[API abuse][Data leak]Leaked 2.2MOrganizations 1Disclosed 2026-10-02Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Daiichi Life Group: unauthorized access to the HR system[Intrusion][Data leak]Leaked 120KOrganizations 2Disclosed 2026-10-02Updated 2026-10-22Tokyo[Contained][Severity: Major]
Kodansha BECK: unauthorized access to an employee email account[Credential abuse][Data leak]Organizations 1Disclosed 2026-10-02Updated 2026-10-22Tokyo[Resolved][Severity: Major]
Nichii Gakkan: backup file on the care services site downloadable without authentication[Misconfiguration][Data leak]Leaked 583Organizations 1Disclosed 2026-10-01Updated 2026-10-27 20:41Tokyo[Contained][Severity: Critical]
Lashinbang: unauthorized access to its services[Intrusion][Data leak]Organizations 1Disclosed 2026-10-01Updated 2026-10-26 18:25Tokyo[Resolved][Severity: Major]
Daimaru Matsuzakaya Department Stores: other members' details shown in the app and online stores[Unknown][Data leak]Leaked 581Organizations 1Disclosed 2026-10-01Updated 2026-10-23Tokyo[Contained][Severity: Major]
Nippon Rent-A-Car: separate attack on its app[Intrusion][Data leak]Leaked 55Organizations 1Disclosed 2026-10-01Updated 2026-10-22Tokyo[Resolved][Severity: Major]
Ticketplus: other users' details shown on the Tickeplus e-ticket site[Misconfiguration][Data leak][Service outage]Leaked 107Organizations 1Disclosed 2026-09-30Updated 2026-10-27 17:02Akita, Kyoto, Tokyo[Investigating][Severity: Critical]
Sagawa: unauthorized access to the parcel tracking service[Intrusion][Data leak][Service outage]Leaked 53.2MOrganizations 4Disclosed 2026-09-30Updated 2026-10-22Tokyo[Contained][Severity: Major]
Benefit One: other companies' employee data in survey downloads[Misconfiguration][Data leak]Leaked 13.5KOrganizations 1Disclosed 2026-09-30Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
G-Plan: unauthorized access to the G-Point system[Intrusion][Data leak][Service outage]Leaked 70KOrganizations 1Disclosed 2026-09-29Updated 2026-10-26 18:29Tokyo[Contained][Severity: Critical]
Yamato Transport: unauthorized access to Kuroneko deferred payment[Intrusion][Data leak]Leaked 5.3MOrganizations 4,100Disclosed 2026-09-29Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Unirita: unauthorized access to its document management system[Intrusion][Data leak][Extortion]Organizations 1Disclosed 2026-09-29Updated 2026-10-22Tokyo[Contained][Severity: Critical]
eplus: unauthorized access to the e-ticket refund system[Intrusion][Data leak]Leaked 1.5KOrganizations 1Disclosed 2026-09-29Updated 2026-10-22Tokyo[Contained][Severity: Major]
Japan Post: unauthorized access to the Post Office App[Intrusion][Data leak][Service outage]Leaked 69Organizations 1Disclosed 2026-09-29Updated 2026-10-22Tokyo[Resolved][Severity: Critical]
TOPPAN: Sompo Japan policyholder data sent to another insurer[Misdelivery][Data leak]Leaked 177.4KOrganizations 2Disclosed 2026-09-28Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Temairazu: unauthorized access to the TEMAIRAZU hotel booking management service[Intrusion][Data leak]Leaked 4.5MOrganizations 1Disclosed 2026-09-28Updated 2026-10-22Tokyo[Contained][Severity: Major]
Shueisha: unauthorized access to the HAPPY PLUS COMMUNITY blogger system[Misconfiguration][API abuse][Data leak]Leaked 2.8KOrganizations 1Disclosed 2026-09-27Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Starts Publishing: unauthorized access to the OZmall booking site[Web app exploit][Data leak]Leaked 447.6KOrganizations 1Disclosed 2026-09-27Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Tokyo Metro: unauthorized access to the Metpo member service[Intrusion][Data leak]Leaked 59KOrganizations 1Disclosed 2026-09-26Updated 2026-10-26 18:29Tokyo[Investigating][Severity: Major]
Keio: ransomware attack on the group[Ransomware][Service outage][Extortion]Organizations 1Disclosed 2026-09-26Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Nippon Rent-A-Car: unauthorized access to its app[Unknown][Data leak]Leaked 41Organizations 1Disclosed 2026-09-25Updated 2026-10-26 18:29Tokyo[Contained][Severity: Critical]
Times Mobility: Times Car member data and licence images leaked[Web app exploit][Data leak]Leaked 6.6MOrganizations 1Disclosed 2026-09-25Updated 2026-10-23Tokyo[Contained][Severity: Major]
Japan Post: unauthorized access to the web service for international mail inquiries[Intrusion][Data leak]Leaked 600Organizations 1Disclosed 2026-09-25Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Fines: unauthorized access to its booking system[Intrusion][Data leak]Leaked 1.5MOrganizations 1Disclosed 2026-09-17Updated 2026-10-27 17:02Tokyo[Investigating][Severity: Moderate]
Asahi Kasei: former employee passed trade secrets to a Chinese company[Insider][Data leak]Organizations 1Disclosed 2026-09-15Updated 2026-10-23Tokyo[Contained][Severity: Critical]
LEAN BODY: unauthorized access to its data analysis tool[Web app exploit][Data leak]Leaked 440KOrganizations 1Disclosed 2026-09-11Updated 2026-10-22Tokyo[Contained][Severity: Critical]
Digital Agency: unauthorized access to the Government Solution Service[Intrusion][Data leak]Leaked 246KOrganizations 1Disclosed 2026-09-09Updated 2026-10-23Tokyo[Contained][Severity: Critical]
ApplyNow: unauthorized access to its recruiting platform[Web app exploit][Data leak]Leaked 390KOrganizations 2Disclosed 2026-09-07Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Institute of Science Tokyo: unauthorized access to its IT infrastructure[Intrusion][Data leak]Organizations 1Disclosed 2026-09-02Updated 2026-10-23Tokyo[Resolved][Severity: Critical]
Seibu Railway: 52 Seats of Happiness booking data viewable from outside[Misconfiguration][Data leak]Leaked 500Organizations 1Disclosed 2026-09-02Updated 2026-10-22Tokyo[Contained][Severity: Critical]
RIZAP: employee uploaded health guidance data to an outside generative AI service[Insider][Data leak]Leaked 20KOrganizations 3Disclosed 2026-09-01Updated 2026-10-23Tokyo[Contained][Severity: Major]
Mitsui Fudosan: unauthorized access to a system used by the group[Credential abuse][Data leak]Leaked 36KOrganizations 1Disclosed 2026-08-31Updated 2026-10-22Tokyo[Contained][Severity: Major]
Ando Hazama: employee tricked by a fake police officer into sending business card data[Phishing][Data leak]Leaked 5KOrganizations 1Disclosed 2026-08-30Updated 2026-10-22Tokyo[Contained][Severity: Major]
Mandarake: unauthorized access to its servers[Intrusion][Data leak][Service outage]Organizations 1Disclosed 2026-08-28Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Yellow Hat: unauthorized access to the online service booking system[Web app exploit][Data leak][Service outage]Leaked 1.8MOrganizations 1Disclosed 2026-08-27Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Zurich: unauthorized access to the Z-Dash dashcam upload system[Web app exploit][Data leak]Leaked 1.7KOrganizations 1Disclosed 2026-08-25Updated 2026-10-22Tokyo[Contained][Severity: Major]
Cover: unauthorized access to the hololive OFFICIAL CARD GAME website[Web app exploit][Data leak]Organizations 1Disclosed 2026-08-24Updated 2026-10-22Tokyo[Contained][Severity: Critical]
All Nippon Airways Trading: unauthorized access to the Eraberu e-GIFT corporate gift service[Intrusion][Data leak][Fraud][Service outage]Organizations 1Disclosed 2026-08-24Updated 2026-10-22Tokyo[Contained][Severity: Critical]
Fancrew: credential stuffing attack on the mystery shopper service[Credential abuse][Data leak][Fraud][Service outage]Leaked 59.4KOrganizations 1Disclosed 2026-08-21Updated 2026-10-27 20:08Tokyo[Contained][Severity: Major]
Rakuten Books Network: intruders reach work PCs holding 33,333 Rakuten Books delivery addresses[Intrusion][Data leak]Leaked 33.3KOrganizations 2Disclosed 2026-08-18Updated 2026-10-22Tokyo[Contained][Severity: Critical]
VOISING: unauthorized access to a BI tool it uses[Web app exploit][Data leak]Leaked 170KOrganizations 1Disclosed 2026-08-14Updated 2026-10-22Kanagawa, Tokyo[Contained][Severity: Major]
T museum: Unko Museum website tampered with[Web app exploit][Data leak][Site defacement]Leaked 4Organizations 2Disclosed 2026-08-13Updated 2026-10-22Tokyo[Investigating][Severity: Moderate]
Tokyo Gas Network: work laptop lost[Lost device][Data leak]Leaked 20KOrganizations 1Disclosed 2026-08-12Updated 2026-10-22Tokyo[Contained][Severity: Critical]
White Essence: unauthorized access to its booking site and core system[Web app exploit][Data leak][Service outage]Leaked 1.1MOrganizations 1Disclosed 2026-08-10Updated 2026-10-23Tokyo[Resolved][Severity: Critical]
REXT: ransomware attack on the headquarters and store network[Ransomware][Data leak][Service outage]Leaked 1MOrganizations 2Disclosed 2026-08-10Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
RIZAP: unauthorized access to the APORITO online store[Web app exploit][Data leak][Service outage]Organizations 1