Find incidents
Filter by disclosure date, method, impact and status, or by where the affected organizations are, their industry or type and size.
574 results
Disclosed 2026-10-01Updated 2026-10-27 20:41Tokyo[Contained][Severity: Critical]
Lashinbang: unauthorized access to its services[Intrusion][Data leak]Organizations 1Disclosed 2026-10-01Updated 2026-10-26 18:25Tokyo[Resolved][Severity: Major]
Daimaru Matsuzakaya Department Stores: other members' details shown in the app and online stores[Unknown][Data leak]Leaked 581Organizations 1Disclosed 2026-10-01Updated 2026-10-23Tokyo[Contained][Severity: Major]
Nippon Rent-A-Car: separate attack on its app[Intrusion][Data leak]Leaked 55Organizations 1Disclosed 2026-10-01Updated 2026-10-22Tokyo[Resolved][Severity: Major]
Ticketplus: other users' details shown on the Tickeplus e-ticket site[Misconfiguration][Data leak][Service outage]Leaked 107Organizations 1Disclosed 2026-09-30Updated 2026-10-27 17:02Akita, Kyoto, Tokyo[Investigating][Severity: Critical]
Sagawa: unauthorized access to the parcel tracking service[Intrusion][Data leak][Service outage]Leaked 53.2MOrganizations 4Disclosed 2026-09-30Updated 2026-10-26 12:51Hiroshima[Investigating][Severity: Critical]
Shudo Gakuen: unauthorized access to a server[Intrusion][Data leak]Organizations 1Disclosed 2026-09-30Updated 2026-10-22Tokyo[Contained][Severity: Major]
Benefit One: other companies' employee data in survey downloads[Misconfiguration][Data leak]Leaked 13.5KOrganizations 1Disclosed 2026-09-30Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
G-Plan: unauthorized access to the G-Point system[Intrusion][Data leak][Service outage]Leaked 70KOrganizations 1Disclosed 2026-09-29Updated 2026-10-26 18:29Tokyo[Contained][Severity: Critical]
Yamato Transport: unauthorized access to Kuroneko deferred payment[Intrusion][Data leak]Leaked 5.3MOrganizations 4,100Disclosed 2026-09-29Updated 2026-10-23Tokyo[Investigating][Severity: Critical]
Unirita: unauthorized access to its document management system[Intrusion][Data leak][Extortion]Organizations 1Disclosed 2026-09-29Updated 2026-10-22Tokyo[Contained][Severity: Critical]
eplus: unauthorized access to the e-ticket refund system[Intrusion][Data leak]Leaked 1.5KOrganizations 1Disclosed 2026-09-29Updated 2026-10-22Tokyo[Contained][Severity: Major]
Japan Post: unauthorized access to the Post Office App[Intrusion][Data leak][Service outage]Leaked 69Organizations 1Disclosed 2026-09-29Updated 2026-10-22Hokkaido[Investigating][Severity: Critical]
Seicomart: unauthorized access to the Seicomart app[Intrusion][Data leak][Service outage]Leaked 570KOrganizations 1Disclosed 2026-09-29Updated 2026-10-22Tokyo[Resolved][Severity: Critical]
TOPPAN: Sompo Japan policyholder data sent to another insurer[Misdelivery][Data leak]Leaked 177.4KOrganizations 2Disclosed 2026-09-28Updated 2026-10-27 08:40Osaka[Contained][Severity: Moderate]
Resona Bank: microfiche with records of closed accounts lost[Lost device][Data leak]Leaked 9KOrganizations 1Disclosed 2026-09-28Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Temairazu: unauthorized access to the TEMAIRAZU hotel booking management service[Intrusion][Data leak]Leaked 4.5MOrganizations 1Disclosed 2026-09-28Updated 2026-10-22Tokyo[Contained][Severity: Major]
Shueisha: unauthorized access to the HAPPY PLUS COMMUNITY blogger system[Misconfiguration][API abuse][Data leak]Leaked 2.8KOrganizations 1Disclosed 2026-09-27Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Starts Publishing: unauthorized access to the OZmall booking site[Web app exploit][Data leak]Leaked 447.6KOrganizations 1Disclosed 2026-09-27Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Tokyo Metro: unauthorized access to the Metpo member service[Intrusion][Data leak]Leaked 59KOrganizations 1Disclosed 2026-09-26Updated 2026-10-26 18:29Tokyo[Investigating][Severity: Major]
Keio: ransomware attack on the group[Ransomware][Service outage][Extortion]Organizations 1Disclosed 2026-09-26Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Nippon Rent-A-Car: unauthorized access to its app[Unknown][Data leak]Leaked 41Organizations 1Disclosed 2026-09-25Updated 2026-10-26 18:29Tokyo[Contained][Severity: Critical]
Times Mobility: Times Car member data and licence images leaked[Web app exploit][Data leak]Leaked 6.6MOrganizations 1Disclosed 2026-09-25Updated 2026-10-23Tokyo[Contained][Severity: Major]
Japan Post: unauthorized access to the web service for international mail inquiries[Intrusion][Data leak]Leaked 600Organizations 1Disclosed 2026-09-25Updated 2026-10-23Saga[Contained][Severity: Moderate]
Saga University: ransomware attack on its administrative NAS[Ransomware][Service outage]Organizations 1Disclosed 2026-09-25Updated 2026-10-22Tokyo[Investigating][Severity: Critical]
Fines: unauthorized access to its booking system[Intrusion][Data leak]Leaked 1.5MOrganizations 1Disclosed 2026-09-17Updated 2026-10-27 17:02Tokyo[Investigating][Severity: Moderate]
Asahi Kasei: former employee passed trade secrets to a Chinese company[Insider][Data leak]Organizations 1Disclosed 2026-09-16Updated 2026-10-23Kyoto[Contained][Severity: Critical]
Helpfeel: unauthorized access to the Gyazo image sharing service[Web app exploit][Data leak][Service outage]Leaked 23.6MOrganizations 1Disclosed 2026-09-15Updated 2026-10-23Toyama[Contained][Severity: Major]
Ainokaze Toyama Railway: unauthorized access to the Ichiman Sanzen Shaku Monogatari tourist train seat system[Intrusion][Data leak]Leaked 1.4KOrganizations 1Disclosed 2026-09-15Updated 2026-10-23Tokyo[Contained][Severity: Critical]
LEAN BODY: unauthorized access to its data analysis tool[Web app exploit][Data leak]Leaked 440KOrganizations 1Disclosed 2026-09-15Updated 2026-10-22Kanagawa[Contained][Severity: Critical]
Odawara Engineering: email account taken over and used for impersonation[Credential abuse][Data leak][Fraud][Financial loss]Organizations 1Disclosed 2026-09-11Updated 2026-10-22Tokyo[Contained][Severity: Critical]
Digital Agency: unauthorized access to the Government Solution Service[Intrusion][Data leak]Leaked 246KOrganizations 1Disclosed 2026-09-11Updated 2026-10-22Osaka[Investigating][Severity: Major]
Rohto Pharmaceutical: unauthorized access to its mail order systems[Intrusion][Data leak]Organizations 1Disclosed 2026-09-09Updated 2026-10-23Tokyo[Contained][Severity: Critical]
ApplyNow: unauthorized access to its recruiting platform[Web app exploit][Data leak]Leaked 390KOrganizations 2Disclosed 2026-09-08Updated 2026-10-22Kyoto[Resolved][Severity: Moderate]
Kyoto Sanga F.C.: fan club member list sent by mistake[Misdelivery][Data leak]Leaked 15.6KOrganizations 1Disclosed 2026-09-07Updated 2026-10-22Tokyo[Investigating][Severity: Major]
Institute of Science Tokyo: unauthorized access to its IT infrastructure[Intrusion][Data leak]Organizations 1Disclosed 2026-09-02Updated 2026-10-23Tokyo[Resolved][Severity: Critical]
Seibu Railway: 52 Seats of Happiness booking data viewable from outside[Misconfiguration][Data leak]Leaked 500Organizations 1Disclosed 2026-09-02Updated 2026-10-22Tokyo[Contained][Severity: Critical]
RIZAP: employee uploaded health guidance data to an outside generative AI service[Insider][Data leak]Leaked 20KOrganizations 3Disclosed 2026-09-01Updated 2026-10-23Tokyo[Contained][Severity: Major]
Mitsui Fudosan: unauthorized access to a system used by the group[Credential abuse][Data leak]Leaked 36KOrganizations 1Disclosed 2026-08-31Updated 2026-10-23Hokkaido[Investigating][Severity: Critical]
Portus: ransomware attack[Ransomware][Data leak]Leaked 31.2KOrganizations 2Disclosed 2026-08-31Updated 2026-10-22Tokyo[Contained][Severity: Major]
Ando Hazama: employee tricked by a fake police officer into sending business card data[Phishing][Data leak]Leaked 5KOrganizations 1Disclosed 2026-08-30Updated 2026-10-22Tokyo[Contained][Severity: Major]
Mandarake: unauthorized access to its servers[Intrusion][Data leak][Service outage]Organizations 1Disclosed 2026-08-28Updated 2026-10-24 03:39Niigata[Contained][Severity: Major]
Corona: unauthorized access to the cloud service for installation records[Credential abuse][Data leak]Leaked 35KOrganizations 1Disclosed 2026-08-28Updated 2026-10-23Yamaguchi[Investigating][Severity: Critical]
Co-op Yamaguchi: unauthorized access to the LINE mini app database[Intrusion][Data leak][Service outage]Leaked 143.1KOrganizations 1Disclosed 2026-08-28Updated 2026-10-23Osaka[Contained][Severity: Critical]
Kind Oal: unauthorized access to an e-commerce platform staff account[Phishing][Credential abuse][Data leak]Leaked 136.5KOrganizations 1Disclosed 2026-08-28Updated 2026-10-23Saitama[Ongoing][Severity: Moderate]
T&K TOKA: ransomware attack[Ransomware][Service outage]Organizations 1Disclosed 2026-08-28Updated 2026-10-23Tokyo[Contained][Severity: Critical]
Yellow Hat: unauthorized access to the online service booking system[Web app exploit][Data leak][Service outage]Leaked 1.8MOrganizations 1Disclosed 2026-08-27Updated 2026-10-23Tokyo[Investigating][Severity: Major]
Zurich: unauthorized access to the Z-Dash dashcam upload system[Web app exploit][Data leak]Leaked 1.7KOrganizations 1Disclosed 2026-08-25Updated 2026-10-22Tokyo[Contained][Severity: Major]
Cover: unauthorized access to the hololive OFFICIAL CARD GAME website[Web app exploit][Data leak]Organizations 1Disclosed 2026-08-24Updated 2026-10-22Tokyo[Contained][Severity: Critical]
All Nippon Airways Trading: unauthorized access to the Eraberu e-GIFT corporate gift service[Intrusion][Data leak][Fraud][Service outage]Organizations 1Disclosed 2026-08-24Updated 2026-10-22Tokyo[Contained][Severity: Critical]
Fancrew: credential stuffing attack on the mystery shopper service[Credential abuse][Data leak][Fraud][Service outage]Leaked 59.4KOrganizations 1