Find incidents
Cyberattacks and data leaks that hit organizations in Japan. Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
56 results
Disclosed 2026-11-02 15:37Updated 2026-11-02 16:23Osaka, Tokyo[Investigating][Severity: Critical]
Suntory: external cloud breach leaks names and emails of about 90,000 employees and other personal data[Intrusion][Data leak]Leaked 90KOrganizations 6Disclosed 2026-10-31Updated 2026-11-01 12:27Aichi, Osaka, Tokyo[Investigating][Severity: Major]
NTT DATA STdirectServices: bond buyer data may have leaked at a contractor[Intrusion][Data leak]Leaked 2.7KOrganizations 8Disclosed 2026-10-30Updated 2026-10-30Osaka[Investigating][Severity: Major]
Coade: Hanikuji Land intrusion[Web app exploit][Credential abuse][Data leak]Leaked 7.6KOrganizations 1Disclosed 2026-10-30Updated 2026-10-30Osaka[Investigating][Severity: Critical]
iDA: MyBRANDS job site intrusion[Credential abuse][Data leak]Leaked 135KOrganizations 1Disclosed 2026-10-30Updated 2026-10-30Osaka[Investigating][Severity: Major]
West Japan Mitsubishi Motor Sales: Microsoft 365 mailbox intrusion[Credential abuse][Data leak]Organizations 1Disclosed 2026-10-29Updated 2026-10-30Osaka[Investigating][Severity: Critical]
NTT Smile Energy: Eco Megane intrusion[Intrusion][Data leak][Service outage]Organizations 1Disclosed 2026-10-29Updated 2026-10-29Osaka[Contained][Severity: Major]
Goods: former online shop intrusion[Unknown][Data leak][Service outage]Leaked 19KOrganizations 1Disclosed 2026-10-28Updated 2026-10-28Osaka[Investigating][Severity: Critical]
Consortium of Universities in Osaka: web system intrusion[Web app exploit][Data leak][Service outage]Leaked 1.9KOrganizations 1Disclosed 2026-10-27Updated 2026-10-27Osaka[Investigating][Severity: Moderate]
URBAN RESEARCH: official X account taken over[Unknown][Site defacement]Organizations 1Disclosed 2026-10-23Updated 2026-10-30Osaka, Tokyo[Contained][Severity: Critical]
Lindt: online shop and app member data stolen from Future Shop[Web app exploit][Data leak][Service outage]Leaked 3.1MOrganizations 2Disclosed 2026-10-23Updated 2026-10-23Osaka[Contained][Severity: Critical]
Panasonic Operational Excellence: HR data uploaded to external AI[Insider][Data leak]Leaked 334KOrganizations 1Disclosed 2026-10-22Updated 2026-10-23Osaka[Contained][Severity: Critical]
Capcom: CAPCOM ID intrusion[Intrusion][Data leak]Leaked 11.8MOrganizations 1Disclosed 2026-10-21Updated 2026-10-30Aichi, Ehime, Fukuoka, Hiroshima, Hokkaido, Iwate, Kagawa, Kanagawa, Mie, Miyagi, Miyazaki, Nagano, Niigata, Osaka, Shizuoka, Tochigi, Tokyo, Toyama, Yamaguchi, Yamanashi[Investigating][Severity: Critical]
RAKUS Light Cloud: blastmail mail system intrusion[Intrusion][Data leak][Service outage]Organizations 345Disclosed 2026-10-21Updated 2026-10-26Aichi, Akita, Aomori, Chiba, Ehime, Fukui, Fukuoka, Fukushima, Gifu, Gunma, Hiroshima, Hokkaido, Hyogo, Ibaraki, Ishikawa, Iwate, Kagawa, Kagoshima, Kanagawa, Kochi, Kumamoto, Kyoto, Mie, Miyagi, Miyazaki, Nagano, Nagasaki, Nara, Niigata, Oita, Okayama, Okinawa, Osaka, Saga, Saitama, Shiga, Shimane, Shizuoka, Tochigi, Tokushima, Tokyo, Tottori, Toyama, Wakayama, Yamagata, Yamaguchi, Yamanashi[Ongoing][Severity: Moderate]
php2shell: critical flaws in PHP[Web app exploit][Service outage]Organizations 608Disclosed 2026-10-21Updated 2026-10-25Osaka[Contained][Severity: Critical]
Future Shop: unauthorized access to its servers[Intrusion][Service outage]Organizations 1Disclosed 2026-10-19Updated 2026-10-30Osaka[Investigating][Severity: Critical]
Hankyu Hanshin Department Stores: booking and other sites intrusion[Intrusion][Data leak][Service outage]Leaked 1.3MOrganizations 2Disclosed 2026-10-19Updated 2026-10-30Aichi, Fukuoka, Kanagawa, Osaka, Saitama, Tokyo[Investigating][Severity: Critical]
Ymirlink: Cuenote FC mail system intrusion[Web app exploit][Data leak]Leaked 51.6MOrganizations 32Disclosed 2026-10-19Updated 2026-10-20 15:50Osaka[Contained][Severity: Critical]
HANOWA: dental staffing cloud storage exposed[Misconfiguration][Data leak]Leaked 49.3KOrganizations 1Disclosed 2026-10-17Updated 2026-10-26Osaka[Investigating][Severity: Critical]
Joshin: unauthorized access[Intrusion][Data leak][Service outage]Leaked 6MOrganizations 1Disclosed 2026-10-16Updated 2026-10-29Aichi, Ishikawa, Osaka, Tokyo[Investigating][Severity: Major]
WASABI: WASABI SWITCH leaks customer data; BuySell group reports 1,369 order records[Intrusion][Data leak]Leaked 1.4KOrganizations 5Disclosed 2026-10-16Updated 2026-10-23Osaka, Tokyo[Contained][Severity: Critical]
Trade Works: intrusion leaks IwaiCosmo data and places orders[Intrusion][Misconfiguration][Data leak][Fraud][Financial loss]Leaked 5KOrganizations 2Disclosed 2026-10-16Updated 2026-10-22Osaka[Contained][Severity: Critical]
NTT Solmare: Comic Cmoa intrusion[Intrusion][Data leak][Service outage]Leaked 4.2MOrganizations 1Disclosed 2026-10-15Updated 2026-10-15Osaka, Tokyo[Investigating][Severity: Critical]
Daiwa Institute of Research: Naito Securities' online trading system intrusion[Intrusion][Data leak]Leaked 631Organizations 2Disclosed 2026-10-15Updated 2026-10-15Osaka[Investigating][Severity: Critical]
Nippon Life Hospital: tech support scam[Phishing][Data leak]Leaked 253Organizations 1Disclosed 2026-10-13Updated 2026-10-28 08:05Fukuoka, Osaka[Contained][Severity: Critical]
toypo: shop membership app access control flaw[API abuse][Data leak]Leaked 697.2KOrganizations 4Disclosed 2026-10-13Updated 2026-10-26Aichi, Aomori, Chiba, Fukuoka, Hiroshima, Hyogo, Kagawa, Kagoshima, Kanagawa, Oita, Okayama, Osaka, Saitama, Tochigi[Investigating][Severity: Critical]
Arcadia: SpeeCAN RAIDEN intrusion[Web app exploit][Data leak][Service outage]Leaked 3.1MOrganizations 34Disclosed 2026-10-13Updated 2026-10-13Osaka[Investigating][Severity: Critical]
NEXT STAGE: fake Metabase account enables database searches[Web app exploit][Data leak]Leaked 40KOrganizations 1Disclosed 2026-10-12Updated 2026-10-12Osaka[Contained][Severity: Critical]
Applabo: unauthorized access to its mail server[Credential abuse][Misconfiguration][Data leak]Organizations 1Disclosed 2026-10-08Updated 2026-10-21Aichi, Aomori, Hiroshima, Kanagawa, Osaka, Shizuoka, Tokyo[Investigating][Severity: Critical]
Commune: Commune intrusion[Intrusion][Data leak]Leaked 166.5KOrganizations 28Disclosed 2026-10-07Updated 2026-10-27Aichi, Fukuoka, Hiroshima, Ibaraki, Osaka, Tokyo[Ongoing][Severity: Critical]
IDC Frontier: ransomware attack on IDCF Cloud[Ransomware][Intrusion][Web app exploit][Service outage][Data leak]Leaked 4MOrganizations 495Disclosed 2026-10-05Updated 2026-10-21Osaka, Tokyo[Ongoing][Severity: Critical]
Osaka Metropolitan University: NEC contractor attack disrupts systems[Ransomware][Credential abuse][Service outage][Data leak]Leaked 130KOrganizations 3Disclosed 2026-10-05Updated 2026-10-06Osaka[Resolved][Severity: Critical]
i-plug: OfferBox data exposure[Misconfiguration][Data leak]Leaked 314KOrganizations 1Disclosed 2026-10-05Updated 2026-10-05Osaka[Investigating][Severity: Critical]
Daiki Suisan: unauthorized access to its app[Intrusion][Data leak]Leaked 174.9KOrganizations 1Disclosed 2026-09-28Updated 2026-10-27Osaka[Contained][Severity: Critical]
Lean on Me: Special Learning intrusion[Web app exploit][Data leak]Leaked 82.7KOrganizations 1Disclosed 2026-09-28Updated 2026-10-26Osaka[Contained][Severity: Moderate]
Resona Bank: closed-account microfiche lost[Lost device][Data leak]Leaked 9KOrganizations 1Disclosed 2026-09-16Updated 2026-10-06 08:05Osaka[Contained][Severity: Major]
Daiko Printing: PhotoGoods payment system tampering[Web app exploit][Malware][Data leak]Organizations 1Disclosed 2026-09-11Updated 2026-10-22Osaka[Investigating][Severity: Major]
Rohto Pharmaceutical: mail order systems intrusion[Credential abuse][Data leak]Organizations 1Disclosed 2026-08-28Updated 2026-10-13Osaka[Contained][Severity: Critical]
Kind Oal: e-commerce platform staff account intrusion[Phishing][Credential abuse][Data leak]Leaked 136.5KOrganizations 1Disclosed 2026-08-20Updated 2026-08-20Osaka[Contained][Severity: Major]
Expo 2025 Osaka, Kansai, Japan: subcontractor's Microsoft 365 account intrusion[Phishing][Credential abuse][Data leak]Organizations 1Disclosed 2026-08-17Updated 2026-09-10Osaka[Contained][Severity: Critical]
SAKURA internet: rental servers and sales system intrusion[Intrusion][Malware][Data leak]Leaked 1.4MOrganizations 1Disclosed 2026-08-03Updated 2026-08-28 08:05Osaka[Contained][Severity: Moderate]
M&S Food Service: Miyamoto Munashi intrusion[Intrusion][Data leak]Leaked 1.9KOrganizations 1Disclosed 2026-07-26Updated 2026-09-08Osaka[Contained][Severity: Critical]
NTT SmartConnect: unauthorized access to Smile Server[Intrusion][Service outage]Organizations 1Disclosed 2026-06-22Updated 2026-08-21Osaka[Ongoing][Severity: Critical]
Faith Group: ransomware attack[Ransomware][Intrusion][Data leak][Service outage]Organizations 1Disclosed 2026-06-19Updated 2026-09-28Osaka, Tokyo[Contained][Severity: Critical]
Delightful: Meruhaikun mail system intrusion[Web app exploit][Intrusion][Data leak][Service outage]Leaked 1.7MOrganizations 4Disclosed 2026-06-19Updated 2026-06-19Osaka[Investigating][Severity: Major]
Gendai Butsudan: service network intrusion[Intrusion][Data leak]Organizations 1Disclosed 2026-06-04Updated 2026-10-30Osaka[Resolved][Severity: Critical]
Visual Arts: unauthorized access to its cloud storage[Credential abuse][Data leak][Service outage]Leaked 6KOrganizations 1Disclosed 2026-03-23Updated 2026-07-16Osaka[Contained][Severity: Major]
Omikenshi: ransomware attack[Ransomware][Credential abuse][Data leak][Service outage]Organizations 1Disclosed 2026-03-17Updated 2026-07-27 08:05Fukuoka, Osaka, Saitama, Tokyo[Contained][Severity: Major]
Nippon Telenet: ransomware-type attack encrypts server files[Ransomware][Data leak][Service outage]Organizations 5Disclosed 2026-03-17Updated 2026-05-13Osaka[Contained][Severity: Critical]
Medicus Shuppan, Publishers: ransomware attack[Ransomware][Credential abuse][Data leak][Service outage]Leaked 772KOrganizations 1Disclosed 2026-03-16Updated 2026-04-17Osaka[Contained][Severity: Major]
Iwatani: unauthorized access to group systems[Intrusion][Data leak]Organizations 1