Find incidents
Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
211 results
Disclosed 2026-10-27Updated 2026-10-27 19:58Tokyo[Investigating][Severity: Critical]
Sony Network Communications: unauthorized access to the So-net member database leaks data of about 2.59 million members[Intrusion][Data leak]Leaked 2.6MOrganizations 1Disclosed 2026-10-27Updated 2026-10-27 17:02Tokyo[Investigating][Severity: Major]
Basic: unauthorized access to the ferret One marketing platform[Web app exploit][Data leak]Organizations 1Disclosed 2026-10-27Updated 2026-10-27 17:02Tokyo[Contained][Severity: Major]
Hiroshima Gakuin Junior and Senior High School: unauthorized access to Microsoft 365 accounts[Credential abuse][Phishing][Data leak]Organizations 1Disclosed 2026-10-27Updated 2026-10-27 17:02Tokyo[Contained][Severity: Major]
Smartshare: unauthorized access to the OWNLY SNS campaign tool leaks Mos campaign entrants' data[Web app exploit][Data leak]Leaked 14KOrganizations 2Disclosed 2026-10-26Updated 2026-10-27 17:02Tokyo[Ongoing][Severity: Moderate]
Lawson: unauthorized access at the contractor running the app pre-order store search[Unknown][Service outage]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 17:02Tokyo[Investigating][Severity: Major]
Sonicmoov: unauthorized access to the COMSBI Enterprise platform[Credential abuse][Data leak][Service outage]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 14:31Tokyo[Investigating][Severity: Critical]
Doutor Coffee: unauthorized access; employee data may have leaked[Intrusion][Data leak]Leaked 951Organizations 1Disclosed 2026-10-26Updated 2026-10-27 14:31Tokyo[Resolved][Severity: Moderate]
FC Tokyo: rogue content and redirects on the official website[Web app exploit][Site defacement]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 14:31Tokyo[Contained][Severity: Major]
Tokuma Shoten Publishing: unauthorized access to the GoodsPress Web test environment[Intrusion][Data leak][Site defacement]Leaked 103Organizations 1Disclosed 2026-10-26Updated 2026-10-27 08:40Tokyo[Investigating][Severity: Critical]
Bandai Logipal: unauthorized access; Ichiban Kuji ONLINE delivery data may have leaked[Intrusion][Credential abuse][Data leak][Service outage]Organizations 2Disclosed 2026-10-26Updated 2026-10-27 08:40Tokyo[Contained][Severity: Critical]
giftee: unauthorized access to its system and fraudulent e-gift issuance[Web app exploit][Fraud][Financial loss]Organizations 1Disclosed 2026-10-26Updated 2026-10-27 08:40Tokyo[Contained][Severity: Critical]
Rakuten Group: unauthorized access to Rakuten Travel's overseas hotel pages and multilingual booking site[Intrusion][Data leak]Leaked 2.6MOrganizations 1Disclosed 2026-10-24Updated 2026-10-26 12:51Tokyo[Contained][Severity: Critical]
Chariloto: unauthorized access to the Chariloto keirin and auto race betting app[Web app exploit][Data leak][Service outage]Leaked 373Organizations 1Disclosed 2026-10-24Updated 2026-10-25 00:41Tokyo[Investigating][Severity: Critical]
IGREKS: unauthorized access to the Y-mail email delivery service[Intrusion][Credential abuse][Data leak][Service outage]Organizations 1Disclosed 2026-10-23Updated 2026-10-27 08:40Tokyo[Investigating][Severity: Major]
Good Smile Company: unauthorized access to the Official Shop[Web app exploit][Data leak][Service outage]Organizations 1Disclosed 2026-10-23Updated 2026-10-26 12:51Tokyo[Contained][Severity: Critical]
Nihon Seirei: unauthorized access to the AI Lab 225 stock forecast site[Intrusion][Malware][Data leak]Leaked 19.6KOrganizations 1Disclosed 2026-10-23Updated 2026-10-26 12:51Tokyo[Contained][Severity: Critical]
Valuedesign: unauthorized access to the Value Card house e-money service[Intrusion][Web app exploit][Data leak]Leaked 1.4MOrganizations 2Disclosed 2026-10-23Updated 2026-10-25 00:41Tokyo[Investigating][Severity: Critical]
NEXCO EAST: unauthorized access to the Doratora expressway information site[Intrusion][Data leak]Organizations 1Disclosed 2026-10-23Updated 2026-10-25 00:41Tokyo[Investigating][Severity: Major]
Travel Zip: unauthorized access at the operator of Taito City's TAITO Odekake Navi tourism site[Intrusion][Data leak]Leaked 5.5KOrganizations 2Disclosed 2026-10-23Updated 2026-10-25 00:41Tokyo[Investigating][Severity: Critical]
Tokio Marine X: possible unauthorized access to the contract management system[Intrusion][Service outage]Organizations 1Disclosed 2026-10-23Updated 2026-10-24 03:51Tokyo[Investigating][Severity: Moderate]
Tokyo Waterworks Bureau: four external hard drives holding personal data lost[Lost device][Data leak]Leaked 1.9KOrganizations 1Disclosed 2026-10-23Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Commerble: unauthorized access to the GALLERY·2 online shop through its EC platform[Credential abuse][Misconfiguration][Data leak][Service outage]Leaked 128KOrganizations 2Disclosed 2026-10-23Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Green Monster: user data taken through the FX Navi demo trading app API[API abuse][Data leak]Leaked 6.2MOrganizations 1Disclosed 2026-10-23Updated 2026-10-23Tokyo[Contained][Severity: Major]
Nippon Gas: unauthorized access to the My Nichigas sign-up system[API abuse][Data leak]Leaked 85Organizations 1Disclosed 2026-10-23Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Treasure Factory: unauthorized access to the case management system for home pickup and moving[Web app exploit][Data leak][Service outage]Leaked 746.3KOrganizations 1Disclosed 2026-10-22Updated 2026-10-27 17:02Tokyo[Contained][Severity: Critical]
KOMOJU: unauthorized access to payment and CRM systems[Intrusion][Data leak][Service outage]Leaked 4.1KOrganizations 1Disclosed 2026-10-22Updated 2026-10-27 17:02Ehime, Tokyo[Investigating][Severity: Major]
Level Enter: unauthorized access to the AI.R-Scorer essay scoring service[Web app exploit][Data leak]Organizations 2Disclosed 2026-10-22Updated 2026-10-27 14:31Tokyo[Investigating][Severity: Critical]
VALTEC: unauthorized access; customer data may have leaked[Web app exploit][Malware][Data leak][Service outage]Organizations 1Disclosed 2026-10-22Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Goldenway Japan: FXTF trading credentials stolen through an attack on an external VPS[Credential abuse][Data leak][Fraud]Organizations 1Disclosed 2026-10-22Updated 2026-10-23Tokyo[Investigating][Severity: Moderate]
Lintec: unauthorized access to some systems[Intrusion]Organizations 1Disclosed 2026-10-22Updated 2026-10-23Tokyo[Contained][Severity: Major]
Speee: unauthorized logins to group partner dashboards[Credential abuse][Data leak]Leaked 3.8KOrganizations 2Disclosed 2026-10-22Updated 2026-10-23Aichi, Tokyo[Investigating][Severity: Critical]
Spiral LOCAS: unauthorized access to the municipal staff call-up system[Intrusion][Data leak]Organizations 2Disclosed 2026-10-22Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Net Protections: unauthorized access to the NP Atobarai invoice reissue system[API abuse][Data leak]Leaked 28.9KOrganizations 1Disclosed 2026-10-21Updated 2026-10-27 20:41Tokyo[Investigating][Severity: Critical]
Recruit: unauthorized access to Carsensor.net and C-MATCH[Intrusion][Data leak][Service outage]Leaked 3.7MOrganizations 1Disclosed 2026-10-21Updated 2026-10-27 19:58Aichi, Fukuoka, Hiroshima, Iwate, Kagawa, Miyagi, Nagano, Niigata, Osaka, Tochigi, Tokyo, Toyama[Investigating][Severity: Critical]
RAKUS Light Cloud: unauthorized access to the blastmail email delivery service[Intrusion][Data leak][Service outage]Organizations 345Disclosed 2026-10-21Updated 2026-10-27 19:58Tokyo[Investigating][Severity: Critical]
GMO Internet: unauthorized access to Onamae.com Desktop Cloud[Intrusion][Malware][Data leak][Service outage][Fraud][Extortion][Financial loss]Organizations 5Disclosed 2026-10-21Updated 2026-10-27 17:02Osaka, Tokyo[Contained][Severity: Critical]
Future Shop: unauthorized access to its servers[Intrusion][Service outage][Data leak]Leaked 3.1MOrganizations 2Disclosed 2026-10-21Updated 2026-10-27 09:05Aichi, Akita, Aomori, Chiba, Ehime, Fukui, Fukuoka, Fukushima, Gifu, Gunma, Hiroshima, Hokkaido, Hyogo, Ibaraki, Ishikawa, Iwate, Kagawa, Kagoshima, Kanagawa, Kochi, Kumamoto, Kyoto, Mie, Miyagi, Miyazaki, Nagano, Nagasaki, Nara, Niigata, Oita, Okayama, Okinawa, Osaka, Saga, Saitama, Shiga, Shimane, Shizuoka, Tochigi, Tokushima, Tokyo, Tottori, Toyama, Wakayama, Yamagata, Yamaguchi, Yamanashi[Ongoing][Severity: Moderate]
php2shell: critical flaws in PHP[Web app exploit][Service outage]Organizations 608Disclosed 2026-10-21Updated 2026-10-27 08:40Tokyo[Contained][Severity: Critical]
Valuence Japan: unauthorized access to the online purchase system[Intrusion][Data leak]Leaked 1.2KOrganizations 1Disclosed 2026-10-21Updated 2026-10-23Tokyo[Investigating][Severity: Major]
JFE Chemical: intrusion into its IT environment[Intrusion][Data leak]Organizations 1Disclosed 2026-10-21Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Monitas: SQL injection attack on the Qzoo survey site[Web app exploit][Data leak][Service outage]Leaked 400KOrganizations 1Disclosed 2026-10-21Updated 2026-10-23Hiroshima, Mie, Tokyo[Investigating][Severity: Major]
Sankei Living Shimbun: unauthorized access to its servers[Intrusion][Data leak][Service outage]Leaked 1.5KOrganizations 3Disclosed 2026-10-21Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Digital Arts: unauthorized access to its cloud service operations[Credential abuse][Data leak]Organizations 1Disclosed 2026-10-21Updated 2026-10-22Tokyo[Contained][Severity: Critical]
OTOTOY: unauthorized access to the OTOTOY music store[Intrusion][Data leak][Service outage]Leaked 480KOrganizations 1Disclosed 2026-10-21Updated 2026-10-22Tokyo[Investigating][Severity: Major]
PingCAP: unauthorized access to internal systems[Credential abuse][Data leak]Leaked 50KOrganizations 1Disclosed 2026-10-21Updated 2026-10-22Tokyo[Investigating][Severity: Moderate]
Shinryo: cyberattack causes a system outage[Intrusion][Service outage]Organizations 1Disclosed 2026-10-20Updated 2026-10-27 14:31Fukuoka, Tokyo[Investigating][Severity: Major]
GoWeb Cloud: SQL injection attack on the GoWeb real estate service[Web app exploit][Data leak]Organizations 3Disclosed 2026-10-20Updated 2026-10-23Tokyo[Ongoing][Severity: Minor]
Monex: account opening paused as a precaution after attempted unauthorized access[Unknown][Service outage]Organizations 1Disclosed 2026-10-20Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Fuji TV: unauthorized access to the programme promotion system[Intrusion][Data leak]Leaked 730Organizations 1Disclosed 2026-10-20Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Trustbank: unauthorized access to Furusato Choice[Intrusion][Data leak][Service outage]Leaked 4.5MOrganizations 1