Find incidents
Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
574 results
Disclosed 2024-03-04Updated 2026-10-23Okayama[Contained][Severity: Critical]
Kanko Gakuseifuku: card data of 3,894 customers may have leaked from its online shop[Web app exploit][Data leak][Fraud]Leaked 3.9KOrganizations 1Disclosed 2024-03-04Updated 2026-10-23Kagoshima[Investigating][Severity: Critical]
Kokubu Seikyo Hospital: ransomware on its image server limits emergency and outpatient care[Ransomware][Misconfiguration][Service outage][Data leak]Organizations 1Disclosed 2024-02-28Updated 2026-10-23Iwate[Contained][Severity: Critical]
Nakahora Farm: former shop compromised; 5,069 card records and personal data of 14,933 customers at risk[Web app exploit][Data leak][Fraud]Leaked 14.9KOrganizations 1Disclosed 2024-02-22Updated 2026-10-23Hiroshima[Contained][Severity: Critical]
Izumi: ransomware; data of up to about 7.78 million Youme Card members may have been viewed[Ransomware][Service outage][Data leak]Leaked 7.8MOrganizations 1Disclosed 2024-02-20Updated 2026-10-23Fukuoka[Contained][Severity: Critical]
CREATEs: personal data of 65,520 customers and some card data may have leaked from its former shop[Web app exploit][Data leak][Fraud]Leaked 65.5KOrganizations 1Disclosed 2024-02-14Updated 2026-10-23Tokyo[Contained][Severity: Major]
LY Corporation: contractor accounts misused; 57,611 staff-related records may have leaked[Credential abuse][Data leak]Leaked 57.6KOrganizations 1Disclosed 2024-02-07Updated 2026-10-23Gunma[Investigating][Severity: Moderate]
Yamada Manufacturing: ransomware encrypts some servers[Ransomware][Service outage]Organizations 1Disclosed 2024-02-06Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Tokyo Verdy: card data of 2,726 customers may have leaked from its official online store[Credential abuse][Data leak][Fraud]Leaked 2.7KOrganizations 1Disclosed 2024-02-05Updated 2026-10-23Hokkaido[Resolved][Severity: Moderate]
Hokuyaku Takeyama Holdings: ransomware via remote desktop with a domain admin ID[Ransomware][Credential abuse]Organizations 1Disclosed 2024-02-01Updated 2026-10-23Osaka[Investigating][Severity: Major]
DyDo: intrusion into the group network; vending machine locations and partner data may have leaked[Intrusion][Data leak]Organizations 1Disclosed 2024-01-31Updated 2026-10-23Saitama[Contained][Severity: Critical]
Saitama Health Promotion Foundation: ransomware on its X-ray reading system puts checkup images at risk[Ransomware][Service outage][Data leak][Extortion]Leaked 9.4KOrganizations 3Disclosed 2024-01-26Updated 2026-10-23Fukushima[Contained][Severity: Moderate]
Cocolonet: intrusion into its servers; malware had been running for two months[Intrusion][Malware][Service outage]Organizations 1Disclosed 2024-01-26Updated 2026-10-23Osaka[Contained][Severity: Critical]
Ofuji: ransomware through a VPN device; up to about 200,000 customer records at risk[Ransomware][Data leak]Leaked 200KOrganizations 1Disclosed 2024-01-19Updated 2026-10-23Mie[Contained][Severity: Critical]
Ise Shoyu Honpo: card data of 2,727 and personal data of 9,034 customers may have leaked from its online shop[Web app exploit][Data leak]Leaked 9KOrganizations 1Disclosed 2024-01-19Updated 2026-10-23Tokyo[Investigating][Severity: Moderate]
Nitto Seimo: ransomware encrypts business data[Ransomware][Service outage]Organizations 1Disclosed 2024-01-10Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Soken Chemical: ransomware; partner and employee personal data may have leaked[Ransomware][Service outage][Data leak]Leaked 16.2KOrganizations 2Disclosed 2024-01-09Updated 2026-10-23Tokyo[Contained][Severity: Major]
agnès b. Japan: ransomware; some business data leaked[Ransomware][Data leak]Organizations 1Disclosed 2023-11-29Updated 2026-10-23Tokyo[Contained][Severity: Major]
JAXA: data leakage from its 2023 intrusion confirmed in a July 2024 follow-up[Intrusion][Malware][Credential abuse][Data leak]Organizations 1Disclosed 2020-03-26Updated 2020-03-30 08:00Hokkaido[Resolved][Severity: Major]
Doshin Service Center: a contractor's engineer left code and client data, including 15,599 personal records, public on GitHub for four months[Misconfiguration][Data leak]Leaked 28.5KOrganizations 1Disclosed 2020-03-25Updated 2020-03-30 08:00Tokyo[Resolved][Severity: Major]
Asobimo: credential stuffing against Toram Online led to logins to Asobimo accounts[Credential abuse][Fraud]Organizations 1Disclosed 2020-03-24Updated 2020-03-30 08:00Osaka[Resolved][Severity: Major]
Nakanishi Metal Works: a phishing email put the nicknames and email addresses of Tour Master members at risk[Phishing][Data leak]Organizations 1Disclosed 2020-03-24Updated 2020-03-26 09:00Osaka[Resolved][Severity: Critical]
Step: payment module of the SteP SPORTS Online Shop altered, data of 63 cards at risk[Web app exploit][Data leak]Leaked 63Organizations 1Disclosed 2020-03-19Updated 2020-03-31 08:00Tokyo[Resolved][Severity: Major]
Soft On Demand: the SOD Prime video service showed other members' account data, for up to 68,898 people[Misconfiguration][Data leak]Leaked 68.9KOrganizations 1Disclosed 2020-03-18Updated 2020-03-26 09:00Hiroshima[Resolved][Severity: Moderate]
Fukuyama city: an unknown post on the city's official Twitter account, possibly through unauthorized access[Credential abuse]Organizations 1Disclosed 2020-03-13Updated 2020-03-17 08:00Kagoshima[Resolved][Severity: Moderate]
Kagoshima University: intruders logged into its Faculty of Education website and altered the site map page[Credential abuse][Site defacement]Organizations 1Disclosed 2020-03-12Updated 2020-03-17 08:00Chiba[Resolved][Severity: Moderate]
Minamiboso City Tourism Association: prize emails for a Minamiboso city coupon draw carried a list of 1,577 entrants[Misdelivery][Data leak]Leaked 1.6KOrganizations 2Disclosed 2020-03-07Updated 2020-03-12 00:07Kagawa[Resolved][Severity: Critical]
Kamada Shoyu: break-in at its business sales site leaked 5,787 customer records, including login passwords[Intrusion][Data leak]Leaked 5.8KOrganizations 1Disclosed 2020-03-06Updated 2020-03-10 08:00Osaka[Resolved][Severity: Major]
Kanden Amenix: an employee's PC caught Emotet, putting 448 internal and external email addresses at risk[Malware][Data leak]Leaked 448Organizations 1Disclosed 2020-03-04Updated 2020-04-07 08:00Tokyo[Resolved][Severity: Major]
S-Collection: intruders reached the server of its e-pledge service and downloaded the personal data of signers since 2016[Credential abuse][Data leak]Organizations 1Disclosed 2020-03-04Updated 2020-03-09 08:00Tokyo[Resolved][Severity: Major]
Five Gate: logins by others on the Point Income rewards site, with points exchanged by third parties[Credential abuse][Fraud]Organizations 1Disclosed 2020-03-04Updated 2020-03-06 08:00Tokyo[Resolved][Severity: Moderate]
National Institute of Infectious Diseases: an old server left in place was broken into and used to post to an outside forum[Intrusion]Organizations 1Disclosed 2020-03-04Updated 2020-03-06 08:00Tokyo[Resolved][Severity: Critical]
Tapioca Express: payment module of its Tapioca Express online shop altered, data of 623 cards at risk[Web app exploit][Data leak]Leaked 623Organizations 1Disclosed 2020-03-04Updated 2020-03-05 08:00Kanagawa[Resolved][Severity: Moderate]
BOOKOFF: an email to BOOKOFF Online members carried a file listing 1,309 members' email addresses[Misdelivery][Data leak]Leaked 1.3KOrganizations 1Disclosed 2020-03-02Updated 2020-03-16 08:00Tokyo[Resolved][Severity: Moderate]
Nihon Securities Journal: a rogue article from outside appeared on Nihon Securities Journal Digital for about six hours[Intrusion][Site defacement]Organizations 1Disclosed 2020-02-28Updated 2020-03-05 08:00Hokkaido[Resolved][Severity: Major]
Sapporo Gakuin University: a list of 2,524 students sat open on its web server for over three years[Misconfiguration][Data leak]Leaked 2.5KOrganizations 1Disclosed 2020-02-28Updated 2020-03-03 23:31Okayama[Resolved][Severity: Moderate]
Okayama University: a lecturer's mail account was hijacked and sent about 1.5 million spam emails[Credential abuse]Organizations 1Disclosed 2020-02-27Updated 2020-03-02 08:00Osaka[Resolved][Severity: Critical]
Hobbys Factory: 63,587 member IDs, passwords and email addresses leaked from Card Shop BIGWEB[Intrusion][Data leak]Leaked 63.6KOrganizations 1Disclosed 2020-02-26Updated 2020-03-01 19:30Tokyo[Investigating][Severity: Major]
LINE: 4,225 accounts logged into by others and used to post spam and phishing links[Credential abuse][Phishing]Leaked 4.2KOrganizations 1Disclosed 2020-02-26Updated 2020-02-27 08:00Chiba[Resolved][Severity: Critical]
Koisuru Buta Laboratory: intrusion into its net store puts data of 286 cards at risk[Web app exploit][Data leak]Leaked 286Organizations 1Disclosed 2020-02-25Updated 2020-02-27 08:00Kanagawa[Resolved][Severity: Critical]
Fiore: intrusion into the Sekai no Wine Budouya wine shop puts data of 658 cards at risk[Web app exploit][Data leak]Leaked 658Organizations 1Disclosed 2020-02-25Updated 2020-02-27 08:00Aichi[Resolved][Severity: Major]
Toyota Finance: unauthorized logins to its TS CUBIC CARD Mall member site[Credential abuse]Organizations 1Disclosed 2020-02-18Updated 2020-02-21 12:30Niigata[Resolved][Severity: Critical]
Ichimasa Kamaboko: payment module of the Ichimasa Online Shop altered, data of 303 cards at risk[Web app exploit][Data leak]Leaked 303Organizations 1Disclosed 2020-02-18Updated 2020-02-21 12:30Chiba[Resolved][Severity: Moderate]
Keiyo: home center website defaced to send visitors to another site[Intrusion][Site defacement]Organizations 1Disclosed 2020-02-17 12:50Updated 2020-03-17 23:31Tokyo[Resolved][Severity: Minor]
Dwango: floods of traffic against niconico force emergency maintenance and outages[DDoS][Service outage]Organizations 1Disclosed 2020-02-14Updated 2020-02-18 10:00Tokyo[Resolved][Severity: Moderate]
Japan Post: unauthorized access to one of its mail domains sent about 4,000 unwanted emails[Intrusion]Organizations 1Disclosed 2020-02-10Updated 2020-02-12 08:00Tokyo[Resolved][Severity: Major]
Like Academy: intrusion into a contractor's test system for the Nanapocke app puts data of children and parents at risk[Web app exploit][Misconfiguration][Data leak]Leaked 3.8KOrganizations 1Disclosed 2020-02-07 16:00Updated 2020-02-13 10:04Yamanashi[Resolved][Severity: Moderate]
Newscom: the mail account of the Hechima culture venue was taken over and sent mass spam[Intrusion]Organizations 1Disclosed 2020-02-07Updated 2020-02-10 08:00Niigata[Resolved][Severity: Major]
Nagaoka University of Technology: a lecturer's mail account broken into and used to send 66,482 spam emails[Credential abuse][Data leak]Organizations 1Disclosed 2020-02-06 18:04Updated 2020-02-10 08:00Hyogo[Resolved][Severity: Major]
Kobe Steel: intruders in its network reached 250 files with defense-related and personal data[Intrusion][Malware][Data leak]Organizations 1Disclosed 2020-02-06 18:04Updated 2020-02-10 08:00Tokyo[Resolved][Severity: Moderate]
Pasco: intrusion into its network, with traces going back to around 2016[Intrusion][Malware]Organizations 1