Find incidents
Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
574 results
Disclosed 2026-10-21Updated 2026-10-27 17:02Osaka, Tokyo[Contained][Severity: Critical]
Future Shop: unauthorized access to its servers[Intrusion][Service outage][Data leak]Leaked 3.1MOrganizations 2Disclosed 2026-10-21Updated 2026-10-27 17:02Okinawa[Ongoing][Severity: Critical]
Okinawa Tourist Service: personal data of up to 730,000 people leaked from its booking services[Unknown][Data leak][Service outage]Leaked 730KOrganizations 1Disclosed 2026-10-21Updated 2026-10-27 09:05Aichi, Akita, Aomori, Chiba, Ehime, Fukui, Fukuoka, Fukushima, Gifu, Gunma, Hiroshima, Hokkaido, Hyogo, Ibaraki, Ishikawa, Iwate, Kagawa, Kagoshima, Kanagawa, Kochi, Kumamoto, Kyoto, Mie, Miyagi, Miyazaki, Nagano, Nagasaki, Nara, Niigata, Oita, Okayama, Okinawa, Osaka, Saga, Saitama, Shiga, Shimane, Shizuoka, Tochigi, Tokushima, Tokyo, Tottori, Toyama, Wakayama, Yamagata, Yamaguchi, Yamanashi[Ongoing][Severity: Moderate]
php2shell: critical flaws in PHP[Web app exploit][Service outage]Organizations 608Disclosed 2026-10-21Updated 2026-10-27 08:40Tokyo[Contained][Severity: Critical]
Valuence Japan: unauthorized access to the online purchase system[Intrusion][Data leak]Leaked 1.2KOrganizations 1Disclosed 2026-10-21Updated 2026-10-23Chiba, Ishikawa[Investigating][Severity: Moderate]
Aeon: unauthorized access to 42 group websites[Intrusion]Organizations 13Disclosed 2026-10-21Updated 2026-10-23Tokyo[Investigating][Severity: Major]
JFE Chemical: intrusion into its IT environment[Intrusion][Data leak]Organizations 1Disclosed 2026-10-21Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Monitas: SQL injection attack on the Qzoo survey site[Web app exploit][Data leak][Service outage]Leaked 400KOrganizations 1Disclosed 2026-10-21Updated 2026-10-23Hiroshima, Mie, Tokyo[Investigating][Severity: Major]
Sankei Living Shimbun: unauthorized access to its servers[Intrusion][Data leak][Service outage]Leaked 1.5KOrganizations 3Disclosed 2026-10-21Updated 2026-10-23Oita[Investigating][Severity: Major]
Taketa: employee improperly acquires about 60,000 municipal records[Insider][Credential abuse][Data leak]Leaked 60KOrganizations 1Disclosed 2026-10-21Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Digital Arts: unauthorized access to its cloud service operations[Credential abuse][Data leak]Organizations 1Disclosed 2026-10-21Updated 2026-10-22Tokyo[Contained][Severity: Critical]
OTOTOY: unauthorized access to the OTOTOY music store[Intrusion][Data leak][Service outage]Leaked 480KOrganizations 1Disclosed 2026-10-21Updated 2026-10-22Tokyo[Investigating][Severity: Major]
PingCAP: unauthorized access to internal systems[Credential abuse][Data leak]Leaked 50KOrganizations 1Disclosed 2026-10-21Updated 2026-10-22Tokyo[Investigating][Severity: Moderate]
Shinryo: cyberattack causes a system outage[Intrusion][Service outage]Organizations 1Disclosed 2026-10-20Updated 2026-10-27 14:31Fukuoka, Tokyo[Investigating][Severity: Major]
GoWeb Cloud: SQL injection attack on the GoWeb real estate service[Web app exploit][Data leak]Organizations 3Disclosed 2026-10-20Updated 2026-10-23Yamanashi[Contained][Severity: Major]
Fuji-Q Highland: unauthorized logins to its app and member site[Credential abuse][Data leak]Leaked 159Organizations 1Disclosed 2026-10-20Updated 2026-10-23Mie[Investigating][Severity: Moderate]
Mie Prefecture: health promotion website defaced[Intrusion][Site defacement][Service outage][Data leak]Organizations 1Disclosed 2026-10-20Updated 2026-10-23Tokyo[Ongoing][Severity: Minor]
Monex: account opening paused as a precaution after attempted unauthorized access[Unknown][Service outage]Organizations 1Disclosed 2026-10-20Updated 2026-10-23Fukushima, Yamanashi[Investigating][Severity: Major]
Tamanoya and Kigetsudo Celeo: unauthorized access to the funeral flower ordering systems[Intrusion][Data leak]Leaked 10.4KOrganizations 2Disclosed 2026-10-20Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Fuji TV: unauthorized access to the programme promotion system[Intrusion][Data leak]Leaked 730Organizations 1Disclosed 2026-10-20Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Trustbank: unauthorized access to Furusato Choice[Intrusion][Data leak][Service outage]Leaked 4.5MOrganizations 1Disclosed 2026-10-20Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Globee: unauthorized access to systems behind the abceed English learning service[Misconfiguration][Data leak]Leaked 10.8KOrganizations 1Disclosed 2026-10-20Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Hakuhodo: unauthorized operation of the Housing Energy Saving 2024 campaign office system[Intrusion][Data leak][Service outage]Leaked 23.9KOrganizations 2Disclosed 2026-10-20Updated 2026-10-22Tokyo[Contained][Severity: Critical]
Aidma Holdings: unauthorized access to the Mamaworks remote job site[Misconfiguration][Data leak]Organizations 1Disclosed 2026-10-19Updated 2026-10-27 17:02Aichi, Fukuoka, Osaka, Saitama, Tokyo[Investigating][Severity: Critical]
Ymirlink: unauthorized access to the Cuenote FC email delivery service[Web app exploit][Data leak]Leaked 51.6MOrganizations 15Disclosed 2026-10-19Updated 2026-10-23Hokkaido[Investigating][Severity: Critical]
Crypton: unauthorized access to the SONICWIRE and D2R services[Intrusion][Data leak][Service outage]Leaked 420KOrganizations 1Disclosed 2026-10-19Updated 2026-10-23Osaka[Investigating][Severity: Critical]
Hankyu Hanshin Department Stores: unauthorized access to booking and other sites leaks H2O ID member data[Intrusion][Data leak][Service outage]Leaked 1.3MOrganizations 2Disclosed 2026-10-19Updated 2026-10-23Tokyo[Investigating][Severity: Major]
JETRO: unauthorized access to its websites[Intrusion][Data leak][Service outage]Leaked 743Organizations 1Disclosed 2026-10-19Updated 2026-10-23Tokyo[Investigating][Severity: Moderate]
SoftBank: member sites taken offline after an unauthorized access attempt on My SoftBank[Unknown][Service outage]Organizations 1Disclosed 2026-10-19Updated 2026-10-23Tokyo[Investigating][Severity: Moderate]
PAPYLESS: suspected unauthorized access; Renta! suspended[Unknown][Service outage]Organizations 1Disclosed 2026-10-19Updated 2026-10-23Tokyo[Contained][Severity: Major]
Japan Post Holdings: credential stuffing against Yu ID[Credential abuse][Data leak][Service outage]Leaked 249Organizations 1Disclosed 2026-10-19Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
NIFTY: unauthorized access to the line application management system[Intrusion][Data leak]Leaked 542.5KOrganizations 1Disclosed 2026-10-19Updated 2026-10-22Tokyo[Ongoing][Severity: Moderate]
Square Enix: unauthorized logins to Square Enix accounts[Credential abuse]Organizations 1Disclosed 2026-10-19Updated 2026-10-22Shizuoka[Contained][Severity: Major]
Z-kai: unauthorized logins to the Z-ID system[Web app exploit][Data leak]Leaked 13Organizations 1Disclosed 2026-10-18Updated 2026-10-23Ibaraki, Tochigi[Investigating][Severity: Critical]
Business Tech: unauthorized access to Ashikaga City's crematorium booking system[Intrusion][Data leak][Service outage]Leaked 8.8KOrganizations 2Disclosed 2026-10-18Updated 2026-10-23Tokyo[Contained][Severity: Moderate]
Japan Football Association: attack on the JFA Passport app[Intrusion][Service outage]Organizations 1Disclosed 2026-10-17Updated 2026-10-27 08:40Osaka[Investigating][Severity: Critical]
Joshin: unauthorized access[Intrusion][Data leak][Service outage]Leaked 6MOrganizations 1Disclosed 2026-10-17Updated 2026-10-22Aichi[Investigating][Severity: Moderate]
2nd Retailing: unauthorized access to GEO and 2nd STREET systems[Intrusion][Service outage]Organizations 1Disclosed 2026-10-16Updated 2026-10-27 19:58Aichi, Chiba, Fukushima, Hiroshima, Kochi, Miyagi, Nagano, Niigata, Tokyo, Toyama[Investigating][Severity: Critical]
Studio: unauthorized access to the cloud environment of the Studio website builder[Web app exploit][Data leak]Organizations 28Disclosed 2026-10-16Updated 2026-10-27 17:02Aichi, Ishikawa, Osaka, Tokyo[Investigating][Severity: Major]
WASABI: unauthorized access to the WASABI SWITCH order and inventory system[Intrusion][Data leak]Organizations 4Disclosed 2026-10-16Updated 2026-10-24 03:56Osaka, Tokyo[Contained][Severity: Critical]
Trade Works: unauthorized access leaks IwaiCosmo Securities customer data and places orders[Intrusion][Misconfiguration][Data leak][Fraud][Financial loss]Leaked 5KOrganizations 2Disclosed 2026-10-16Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Astemo: unauthorized access to its data sharing cloud[Credential abuse][Data leak][Extortion]Leaked 350Organizations 1Disclosed 2026-10-16Updated 2026-10-23Kanagawa[Contained][Severity: Critical]
FANCL and Attenir: unauthorized access to their online shops[Intrusion][Data leak]Leaked 441.2KOrganizations 2Disclosed 2026-10-16Updated 2026-10-22Osaka[Contained][Severity: Critical]
NTT Solmare: unauthorized access to the Comic Cmoa e-book store[Intrusion][Data leak][Service outage]Leaked 4.2MOrganizations 1Disclosed 2026-10-16Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Nikkei: unauthorized access to the cloud service it uses for system development[Credential abuse][Data leak]Leaked 1.8MOrganizations 1Disclosed 2026-10-15Updated 2026-10-27 14:31Miyagi[Ongoing][Severity: Critical]
Maruki Medical Systems: cyberattack stops orders and shipping[Intrusion][Service outage]Organizations 1Disclosed 2026-10-15Updated 2026-10-26 18:29Tokyo[Contained][Severity: Critical]
Burger King: app member data leaked[Intrusion][Data leak]Leaked 11.2MOrganizations 1Disclosed 2026-10-15Updated 2026-10-26 18:29Tokyo[Contained][Severity: Critical]
Sourcenext: mass leak of member data[API abuse][Data leak]Leaked 22.5MOrganizations 1Disclosed 2026-10-15Updated 2026-10-23Tokyo[Investigating][Severity: Major]
M3: unauthorized access to the MR-kun service for drug makers[Intrusion][Data leak]Organizations 1Disclosed 2026-10-15Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Medley: unauthorized access to the @link clinic system[Intrusion][Malware][Service outage][Data leak]Organizations 1Disclosed 2026-10-15Updated 2026-10-22Tokyo[Contained][Severity: Critical]
Beauty Garage: unauthorized access to its online store[Intrusion][Data leak]Leaked 775.7KOrganizations 1