Find incidents
Cyberattacks and data leaks that hit organizations in Japan. Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
316 results
Disclosed 2026-11-02 15:37Updated 2026-11-02 16:23Osaka, Tokyo[Investigating][Severity: Critical]
Suntory: external cloud breach leaks names and emails of about 90,000 employees and other personal data[Intrusion][Data leak]Leaked 90KOrganizations 6Disclosed 2026-11-02 14:43Updated 2026-11-02 14:43Tokyo[Investigating][Severity: Moderate]
TV TOKYO Direct: TeleTo Mart shopping site intrusion[Intrusion][Service outage]Organizations 1Disclosed 2026-11-02 14:00Updated 2026-11-02 14:00Tokyo[Investigating][Severity: Critical]
WILLs: NetMile breach may expose names and email addresses of up to about 5.49 million people[Intrusion][Data leak][Service outage]Leaked 5.5MOrganizations 1Disclosed 2026-11-02 13:00Updated 2026-11-02 15:04Tokyo[Investigating][Severity: Critical]
istyle: @cosme leak exposes names, addresses and profiles of about 3 million members[Intrusion][Data leak]Leaked 3MOrganizations 1Disclosed 2026-11-02Updated 2026-11-02Tokyo[Investigating][Severity: Critical]
M.League: official site and shop leak data of 9,502 people, including password hashes[Intrusion][Data leak][Service outage]Leaked 9.5KOrganizations 1Disclosed 2026-11-01 15:00Updated 2026-11-02 13:56Tokyo[Investigating][Severity: Moderate]
SmartNews: points and rewards system intrusion[Intrusion][Service outage]Organizations 1Disclosed 2026-11-01Updated 2026-11-01Tokyo[Contained][Severity: Moderate]
BIZMOBILE: BizMobile Go! and BizMobile Go! Direct intrusion temporarily stops admin-console login[Intrusion][Service outage]Organizations 1Disclosed 2026-10-31 22:25Updated 2026-11-01 08:59Tokyo[Investigating][Severity: Critical]
Club Tourism: online booking system intrusion[Intrusion][Data leak][Service outage]Leaked 4.3MOrganizations 1Disclosed 2026-10-31Updated 2026-11-01 12:27Aichi, Osaka, Tokyo[Investigating][Severity: Major]
NTT DATA STdirectServices: bond buyer data may have leaked at a contractor[Intrusion][Data leak]Leaked 2.7KOrganizations 8Disclosed 2026-10-31Updated 2026-10-31 18:50Tokyo[Investigating][Severity: Major]
PhillipCapital Japan: digital securities contractor intrusion[Intrusion][Data leak]Organizations 1Disclosed 2026-10-31Updated 2026-10-31Tokyo[Investigating][Severity: Critical]
Credit Saison: Saison Smart Real Estate Investment contractor platform intrusion[Web app exploit][Data leak][Service outage]Leaked 1.9KOrganizations 1Disclosed 2026-10-31Updated 2026-10-31Tokyo[Investigating][Severity: Major]
Securitize Japan: digital securities platform intrusion[Intrusion][Data leak]Organizations 2Disclosed 2026-10-31Updated 2026-10-31Tokyo[Contained][Severity: Moderate]
Wave: mail-order email account hijacked to send unwanted messages[Intrusion][Service outage]Organizations 1Disclosed 2026-10-30Updated 2026-10-30 22:02Tokyo, Yamanashi[Investigating][Severity: Critical]
Japanticket: customer data leak through an analytics tool[Intrusion][Data leak]Leaked 264KOrganizations 2Disclosed 2026-10-30Updated 2026-10-30 19:55Tokyo[Investigating][Severity: Major]
Lifenet and KDDI: au Life Insurance link system intrusion[Web app exploit][Data leak][Service outage]Leaked 22.5KOrganizations 2Disclosed 2026-10-30Updated 2026-10-30 06:48Tokyo[Contained][Severity: Major]
eplus: festival app admin screen intrusion[Credential abuse][Data leak]Leaked 3.6KOrganizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Investigating][Severity: Critical]
ANA Trading: second intrusion into Eraberu e-GIFT[Intrusion][Service outage]Organizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Contained][Severity: Major]
DHC: online shop intrusion[Web app exploit][Data leak][Fraud]Leaked 5.1KOrganizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Investigating][Severity: Moderate]
Enoteca Online: suspected unauthorized access and unexplained orders prompt shutdown[Intrusion][Fraud][Service outage]Organizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Investigating][Severity: Critical]
Ing cover-ing: customer data possibly exposed at a hosting contractor[Web app exploit][Malware][Data leak][Service outage]Organizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Contained][Severity: Major]
Ministry of Foreign Affairs: intrusion into its external exchange network[Intrusion][Data leak]Leaked 3.6KOrganizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Investigating][Severity: Major]
Ohara Gakuen: web server intrusion[Intrusion][Data leak][Service outage]Organizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Contained][Severity: Critical]
Ryohin Keikaku: MUJI app intrusion[Unknown][Data leak]Leaked 27.3MOrganizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Investigating][Severity: Critical]
Sony Bank: digital securities contractor intrusion[Intrusion][Data leak]Leaked 617Organizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Contained][Severity: Major]
TeeTime Golf School Guide: applicant data possibly viewed in an intrusion[Web app exploit][Data leak]Organizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Investigating][Severity: Critical]
Tin Pan Alley: business server intrusion[Intrusion][Data leak][Service outage]Leaked 1.2MOrganizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Contained][Severity: Major]
Tokyu Land: managed-site AWS server intrusion[Web app exploit][Misconfiguration][Data leak][Service outage]Leaked 4.1KOrganizations 1Disclosed 2026-10-30Updated 2026-10-30Tokyo[Investigating][Severity: Major]
Vook: database accessed through a data analysis tool flaw[Web app exploit][Data leak]Organizations 1Disclosed 2026-10-29Updated 2026-11-02 15:42Kagoshima, Shizuoka, Tokyo[Investigating][Severity: Critical]
Arara: Arara Message breach exposes about 77 million email addresses; count under review[Web app exploit][Data leak][Service outage]Leaked 77MOrganizations 380Disclosed 2026-10-29Updated 2026-10-30Tokyo[Investigating][Severity: Critical]
Matsuya Foods: official app management system intrusion[Unknown][Data leak][Service outage]Leaked 2.4MOrganizations 1Disclosed 2026-10-29Updated 2026-10-29Tokyo[Investigating][Severity: Major]
Clubnets: CN Point satellite systems intrusion[Unknown][Data leak][Service outage]Leaked 16.9KOrganizations 1Disclosed 2026-10-29Updated 2026-10-29Tokyo[Contained][Severity: Major]
ELESTYLE: elepay/OneQR admin system intrusion[Web app exploit][Data leak]Leaked 7.2KOrganizations 1Disclosed 2026-10-29Updated 2026-10-29Tokyo[Investigating][Severity: Major]
Japan Post: intrusion at its newsletter mail contractor[Intrusion][Data leak]Organizations 1Disclosed 2026-10-29Updated 2026-10-29Tokyo[Contained][Severity: Major]
JFLA Holdings: Cuisine Kingdom Web Magazine intrusion[Unknown][Data leak]Leaked 8KOrganizations 1Disclosed 2026-10-29Updated 2026-10-29Tokyo[Investigating][Severity: Critical]
NEL: osina intrusion[Web app exploit][Data leak]Leaked 235.3KOrganizations 1Disclosed 2026-10-28 20:48Updated 2026-10-28 23:15Tokyo[Investigating][Severity: Critical]
Sony Life: Customer Web Service intrusion[Intrusion][Data leak][Service outage]Leaked 385KOrganizations 2Disclosed 2026-10-28 18:47Updated 2026-10-28 23:39Tokyo[Investigating][Severity: Major]
TBS Glowdia: TBS Shopping mail supplier intrusion[Intrusion][Data leak]Leaked 50KOrganizations 1Disclosed 2026-10-28 18:10Updated 2026-10-29Tokyo[Investigating][Severity: Major]
Moi: TwitCasting server intrusion traces[Intrusion][Data leak][Service outage]Leaked 7Organizations 1Disclosed 2026-10-28 17:54Updated 2026-10-28 20:40Tokyo[Contained][Severity: Critical]
Hana Cupid: Internet/Business Hana Cupid intrusion[Intrusion][Data leak]Leaked 4.2MOrganizations 1Disclosed 2026-10-28 17:43Updated 2026-10-30Fukuoka, Miyazaki, Okinawa, Tokyo[Contained][Severity: Critical]
Japan Airlines, All Nippon Airways and others: Amadeus supplier intrusion[Intrusion][Data leak]Leaked 92KOrganizations 5Disclosed 2026-10-28Updated 2026-10-30Tokyo, Toyama[Contained][Severity: Major]
DIRIGIO PICKS: mobile ordering system intrusion[Intrusion][Data leak][Service outage]Leaked 8.3KOrganizations 3Disclosed 2026-10-28Updated 2026-10-30Tokyo[Investigating][Severity: Critical]
GameTrade: game account marketplace intrusion[Web app exploit][Data leak]Leaked 3.4MOrganizations 1Disclosed 2026-10-28Updated 2026-10-29Tokyo[Investigating][Severity: Critical]
ENEOS Power: intrusion into its electricity and gas customer system[Intrusion][Data leak][Service outage]Leaked 57Organizations 1Disclosed 2026-10-28Updated 2026-10-29Hokkaido, Tokyo[Investigating][Severity: Major]
Forestec: Toku-kai supplier system intrusion[Intrusion][Data leak][Service outage]Leaked 29.5KOrganizations 2Disclosed 2026-10-28Updated 2026-10-29Tokyo[Investigating][Severity: Moderate]
METI: Dentori-net intrusion at the Electricity and Gas Market Surveillance Commission[Intrusion][Service outage]Organizations 1Disclosed 2026-10-28Updated 2026-10-28Miyazaki, Tokyo[Investigating][Severity: Major]
Cox (Don Quijote watch repair supplier): ransomware[Ransomware][Data leak]Organizations 5Disclosed 2026-10-28Updated 2026-10-28Tokyo[Investigating][Severity: Critical]
H2INT: DIRECT GAMES intrusion[Intrusion][Data leak]Organizations 1Disclosed 2026-10-27Updated 2026-10-27 21:58Tokyo[Investigating][Severity: Major]
UPSIDER: Breakthrough GRID intrusion[Intrusion][Data leak][Service outage]Leaked 544Organizations 1Disclosed 2026-10-27Updated 2026-10-27 20:43Tokyo[Investigating][Severity: Critical]
Sony Network Communications: So-net database intrusion[Intrusion][Data leak]Leaked 2.6MOrganizations 2Disclosed 2026-10-27Updated 2026-10-27Tokyo[Investigating][Severity: Major]
Basic: ferret One intrusion[Web app exploit][Data leak]Organizations 1