Find incidents
Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
574 results
Disclosed 2026-10-15Updated 2026-10-22Saitama[Contained][Severity: Major]
Kobo: unauthorized access to the Hassha Orai Net partner API server[Intrusion][Data leak]Leaked 8.3KOrganizations 1Disclosed 2026-10-15Updated 2026-10-22Osaka, Tokyo[Investigating][Severity: Critical]
Daiwa Institute of Research: unauthorized access to Naito Securities' online trading system[Intrusion][Data leak]Leaked 631Organizations 2Disclosed 2026-10-14Updated 2026-10-23Tokyo[Resolved][Severity: Critical]
Aena: unauthorized access to its shopping app[Intrusion][Data leak]Leaked 817.2KOrganizations 1Disclosed 2026-10-13Updated 2026-10-26 12:51Aichi, Chiba, Fukuoka, Hiroshima, Hyogo, Kagoshima, Kanagawa, Oita, Okayama, Osaka, Saitama, Tochigi[Investigating][Severity: Critical]
Arcadia: unauthorized access to the SpeeCAN RAIDEN alert service[Web app exploit][Data leak][Service outage]Leaked 3.1MOrganizations 28Disclosed 2026-10-13Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Fivot: unauthorized access to the IDARE cashless payment service[Web app exploit][Data leak]Leaked 129.7KOrganizations 1Disclosed 2026-10-13Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Golf Digest Online: unauthorized access to its servers[Intrusion][Data leak][Service outage]Leaked 1.8KOrganizations 1Disclosed 2026-10-13Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Ride On Express: ransomware at the server operator holding Gin no Sara customer data[Ransomware][Service outage][Data leak]Leaked 6.5MOrganizations 1Disclosed 2026-10-12Updated 2026-10-22Osaka[Contained][Severity: Critical]
Applabo: unauthorized access to its mail server[Credential abuse][Misconfiguration][Data leak]Organizations 1Disclosed 2026-10-09Updated 2026-10-26 18:29Aomori, Hiroshima, Osaka, Shizuoka, Tokyo[Investigating][Severity: Critical]
Commune: unauthorized access to the Commune community platform[Intrusion][Data leak]Leaked 307KOrganizations 12Disclosed 2026-10-09Updated 2026-10-23Tokyo[Contained][Severity: Major]
coconala: unauthorized access to the coconala skill market[Web app exploit][Data leak]Leaked 1.8KOrganizations 1Disclosed 2026-10-09Updated 2026-10-22Kanagawa[Contained][Severity: Critical]
BOOKOFF: unauthorized access to the member system[Intrusion][Data leak]Leaked 6.4MOrganizations 1Disclosed 2026-10-09Updated 2026-10-22Aichi[Investigating][Severity: Major]
Resorttrust: unauthorized access to the booking site[Intrusion][Data leak][Service outage]Organizations 1Disclosed 2026-10-09Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Adventure: unauthorized access to the skyticket back-office system[Intrusion][Data leak]Leaked 17.8KOrganizations 1Disclosed 2026-10-09Updated 2026-10-22Tokyo[Resolved][Severity: Major]
Adventure: skyticket bus booking pages viewable without login[Misconfiguration][Data leak]Leaked 12KOrganizations 1Disclosed 2026-10-09Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Adventure: unauthorized access to skyticket servers[Intrusion][Data leak]Leaked 14.6MOrganizations 1Disclosed 2026-10-08Updated 2026-10-26 18:29Tokyo[Investigating][Severity: Critical]
Nippon Columbia Group: malware on a Daiichikosho contractor's PC[Malware][Data leak]Leaked 8.7MOrganizations 2Disclosed 2026-10-08Updated 2026-10-26 18:25Tokyo[Contained][Severity: Moderate]
Gakken: group sites down after unauthorized access to an external server[Intrusion][Service outage]Organizations 3Disclosed 2026-10-08Updated 2026-10-23Tokyo[Contained][Severity: Critical]
hi-ho: competing sales agency logs in to customer pages[Phishing][Credential abuse][Data leak][Financial loss]Leaked 3.7KOrganizations 1Disclosed 2026-10-08Updated 2026-10-23Tokyo[Resolved][Severity: Critical]
Lawson: unauthorized access to Lawson ID and Lawson app pre-orders[Intrusion][Data leak]Leaked 2.2MOrganizations 1Disclosed 2026-10-08Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Uzabase: unauthorized access to an admin tool used by NewsPicks[Web app exploit][Data leak]Leaked 362KOrganizations 1Disclosed 2026-10-08Updated 2026-10-22Tokyo[Contained][Severity: Major]
hi-ho: impersonation logins to My Page[Phishing][Credential abuse][Data leak]Leaked 38.5KOrganizations 1Disclosed 2026-10-07Updated 2026-10-27 19:58Aichi, Fukuoka, Hiroshima, Ibaraki, Osaka, Tokyo[Ongoing][Severity: Critical]
IDC Frontier: ransomware attack on IDCF Cloud[Ransomware][Intrusion][Web app exploit][Service outage][Data leak]Leaked 4MOrganizations 495Disclosed 2026-10-07Updated 2026-10-22Tokyo[Contained][Severity: Critical]
H.I.S.: unauthorized access to its Thai subsidiary's file server[Intrusion][Data leak]Leaked 627Organizations 1Disclosed 2026-10-07Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Toda: unauthorized access to the payment system[Intrusion][Data leak]Leaked 7.2KOrganizations 1Disclosed 2026-10-06Updated 2026-10-23Tokyo[Contained][Severity: Critical]
dip: unauthorized access to the Baitoru and Baitoru NEXT job sites[Web app exploit][Data leak]Leaked 3.9MOrganizations 1Disclosed 2026-10-06Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Iyaku Joho Net: unauthorized access to Asahi Kasei Therapeutics' Pharma DIGITAL site for healthcare professionals[Intrusion][Data leak][Service outage]Leaked 514KOrganizations 2Disclosed 2026-10-06Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Rakuten Mobile: Rakuten Drive data exposed through compromised administrative credentials[Credential abuse][Data leak]Leaked 15.4KOrganizations 1Disclosed 2026-10-06Updated 2026-10-22Kagawa[Contained][Severity: Major]
Active: SQL injection attack on its frozen food online store[Web app exploit][Data leak]Leaked 54.9KOrganizations 1Disclosed 2026-10-06Updated 2026-10-22Fukuoka[Contained][Severity: Critical]
Mr Max: unauthorized access to its app and online store[Web app exploit][Data leak][Service outage]Leaked 1.7MOrganizations 1Disclosed 2026-10-05Updated 2026-10-26 18:29Tokyo[Investigating][Severity: Critical]
Scala Communications: unauthorized access to the i-ask FAQ system[Credential abuse][Data leak]Leaked 713.1KOrganizations 6Disclosed 2026-10-05Updated 2026-10-26 18:29Aichi[Contained][Severity: Critical]
Yakiniku King: app member data leaked[Intrusion][Data leak]Leaked 10.8MOrganizations 1Disclosed 2026-10-05Updated 2026-10-23Osaka, Tokyo[Ongoing][Severity: Critical]
Osaka Metropolitan University: attack on an NEC contractor disrupts systems and exposes information[Ransomware][Credential abuse][Service outage][Data leak]Leaked 130KOrganizations 3Disclosed 2026-10-05Updated 2026-10-23Okinawa[Contained][Severity: Critical]
Resorts Ryukyu: unauthorized access to the property management system used by Hotel Resort Inn Ishigakijima[Intrusion][Data leak]Leaked 17.2KOrganizations 1Disclosed 2026-10-05Updated 2026-10-22Osaka[Investigating][Severity: Critical]
Daiki Suisan: unauthorized access to its app[Intrusion][Data leak]Leaked 174.9KOrganizations 1Disclosed 2026-10-05Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
GMO Research & AI: unauthorized access to the infoQ survey site[Web app exploit][Data leak][Fraud][Service outage]Leaked 948.5KOrganizations 1Disclosed 2026-10-05Updated 2026-10-22Osaka[Resolved][Severity: Critical]
i-plug: student names and emails in the response data of OfferBox pages for companies[Misconfiguration][Data leak]Leaked 314KOrganizations 1Disclosed 2026-10-04Updated 2026-10-22Tokyo[Contained][Severity: Major]
Nikkei: unauthorized logins to an employee's Google Workspace account[Credential abuse][Data leak]Leaked 1.6KOrganizations 1Disclosed 2026-10-04Updated 2026-10-22Tokyo[Contained][Severity: Major]
Nikkei: Microsoft 365 account taken over and used for phishing emails[Credential abuse][Phishing][Data leak]Organizations 2Disclosed 2026-10-04Updated 2026-10-22Fukuoka[Resolved][Severity: Major]
nimoca: unauthorized access to the usage history service[API abuse][Data leak][Service outage]Leaked 521Organizations 1Disclosed 2026-10-03Updated 2026-10-22Mie, Tokyo[Resolved][Severity: Major]
Recruit: registered email addresses identified through a flaw in StudySapuri[Web app exploit][Data leak]Leaked 3.7KOrganizations 3Disclosed 2026-10-02Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Abahouse International: unauthorized access to member and order data[Intrusion][Data leak][Fraud]Organizations 1Disclosed 2026-10-02Updated 2026-10-23Tokyo[Resolved][Severity: Major]
National Tax Agency: other people's gift tax returns visible in e-Tax My Page[Misconfiguration][Data leak]Leaked 203Organizations 1Disclosed 2026-10-02Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Japan Times: ransomware attack on the group's former administrative server[Ransomware][Data leak]Organizations 2Disclosed 2026-10-02Updated 2026-10-23Tokyo[Investigating][Severity: Major]
JOGMEC: unauthorized access to its information systems[Intrusion][Data leak]Leaked 7.4KOrganizations 1Disclosed 2026-10-02Updated 2026-10-22Tokyo[Resolved][Severity: Critical]
Sammy Networks: unauthorized access to 777CON-PASS[API abuse][Data leak]Leaked 2.2MOrganizations 1Disclosed 2026-10-02Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Daiichi Life Group: unauthorized access to the HR system[Intrusion][Data leak]Leaked 120KOrganizations 2Disclosed 2026-10-02Updated 2026-10-22Fukuoka[Contained][Severity: Moderate]
Green Coop Fukuoka: work laptop stolen[Lost device][Data leak]Leaked 33.5KOrganizations 1Disclosed 2026-10-02Updated 2026-10-22Tokyo[Contained][Severity: Major]
Kodansha BECK: unauthorized access to an employee email account[Credential abuse][Data leak]Organizations 1Disclosed 2026-10-02Updated 2026-10-22Tokyo[Resolved][Severity: Major]
Nichii Gakkan: backup file on the care services site downloadable without authentication[Misconfiguration][Data leak]Leaked 583Organizations 1Disclosed 2026-10-01 17:46Updated 2026-10-27 20:41Ibaraki[Investigating][Severity: Critical]
JAEA: unauthorized access to the JRR-3 research reactor support site[Intrusion][Data leak][Service outage]Leaked 175Organizations 1