Incident involved Any 2026-10-28 20:48 Sony Life: break-in at its Customer Web Service and other systems leaked about 385,000 records of Medicare Life policies it sold as an agent (2) 2026-10-28 18:47 TBS Glowdia: break-in at a contractor's mail delivery system leaked email addresses of up to about 50,000 TBS Shopping members (1) 2026-10-28 18:10 Moi: traces of unauthorized access on the servers of its TwitCasting streaming service, service stopped (1) 2026-10-28 17:54 Hana Cupid: break-in at Internet Hana Cupid and Business Hana Cupid leaked up to 4.24 million member records (1) 2026-10-28 17:43 Japan Airlines and Japan Transocean Air: break-in at supplier Amadeus's passenger service system; booking data of about 92,000 people was viewed (2) 2026-10-28 Cox: ransomware encrypted the servers of a watch repair contractor; names of customers who asked Don Quijote and group stores for repairs may have leaked (5) 2026-10-28 H2INT: break-in at the DIRECT GAMES PC game store leaked members' email addresses, encrypted passwords and order histories (1) 2026-10-28 SOLUMINA: break-in at the QLIFICA Monitoring clinical trial system; user account data may have leaked (2) 2026-10-27 Basic: unauthorized access to the ferret One marketing platform (1) 2026-10-27 Hiroshima Gakuin Junior and Senior High School: unauthorized access to Microsoft 365 accounts (1) 2026-10-27 JETRO: break-in at the e-Venue business matching system; contact details in up to 133 records may have leaked (1) 2026-10-27 MICIN: credential stuffing against the curon online clinic service led to unauthorized logins to clinic and patient accounts (1) 2026-10-27 Smartshare: unauthorized access to the OWNLY SNS campaign tool leaks Mos campaign entrants' data (2) 2026-10-27 Sony Network Communications: unauthorized access to the So-net member database leaks data of about 2.59 million members (2) 2026-10-27 Sukesan: a setting error at contractor Kaho Enterprise may have left staff and former staff data in its attendance system open to outsiders (2) 2026-10-27 UPSIDER: break-in at the members' site of the Breakthrough GRID executive community leaked data of 544 people (1) 2026-10-27 URBAN RESEARCH: official X account taken over (1) 2026-10-26 Bandai Logipal: unauthorized access; Ichiban Kuji ONLINE delivery data may have leaked (2) 2026-10-26 cotta: possible unauthorized access to the baking supplies online shop (1) 2026-10-26 Dear Care: break-in at an outside system behind its nursing and care site altered program code; all services stopped (1) 2026-10-26 Doutor Coffee: unauthorized access; employee data may have leaked (1) 2026-10-26 FC Tokyo: rogue content and redirects on the official website (1) 2026-10-26 Furukawa Electric Power Systems: unauthorized access to the web shipping system (1) 2026-10-26 giftee: unauthorized access to its system and fraudulent e-gift issuance (1) 2026-10-26 Gunosy: a stolen work account was used to get into its cloud and business tools; data of 132 partners and staff leaked (1) 2026-10-26 JP Union: break-in at a mail magazine system used until about 2019 may have leaked a list of over 40,000 members' addresses (1) 2026-10-26 Lawson: unauthorized access at the contractor running the app pre-order store search (1) 2026-10-26 Rakuten Group: unauthorized access to Rakuten Travel's overseas hotel pages and multilingual booking site (1) 2026-10-26 Sonicmoov: unauthorized access to the COMSBI Enterprise platform (1) 2026-10-26 Tokuma Shoten Publishing: unauthorized access to the GoodsPress Web test environment (1) 2026-10-26 Wiseman: unauthorized access to the MeLL+professional care service (1) 2026-10-26 Yomisen WEST: unauthorized access to the Shikoku branch's Yomipost site (1) 2026-10-25 Hida Takayama Tourism and Convention Association: attackers planted a program on the Hida Takayama Travel Guide site and took 449 inquiries (1) 2026-10-24 Chariloto: unauthorized access to the Chariloto keirin and auto race betting app (1) 2026-10-24 IGREKS: unauthorized access to the Y-mail email delivery service (2) 2026-10-23 Nihon Seirei: unauthorized access to the AI Lab 225 stock forecast site (1) 2026-10-23 and ST HD: unauthorized access to business servers (1) 2026-10-23 Commerble: unauthorized access to the GALLERY·2 online shop through its EC platform (2) 2026-10-23 Good Smile Company: unauthorized access to the Official Shop (1) 2026-10-23 Green Monster: user data taken through the FX Navi demo trading app API (1) 2026-10-23 NEXCO EAST: unauthorized access to the Doratora expressway information site (1) 2026-10-23 Nippon Gas: unauthorized access to the My Nichigas sign-up system (1) 2026-10-23 Panasonic Operational Excellence: HR data uploaded to an outside generative AI service (1) 2026-10-23 Pizza Hut: unauthorized access to the online ordering payment API (1) 2026-10-23 Travel Zip: unauthorized access at the operator of Taito City's TAITO Odekake Navi tourism site (2) 2026-10-23 TOKAI Holdings: suspected unauthorized access attempt; TLC member services suspended (1) 2026-10-23 Tokio Marine X: possible unauthorized access to the contract management system (1) 2026-10-23 Tokyo Waterworks Bureau: four external hard drives holding personal data lost (1) 2026-10-23 Treasure Factory: unauthorized access to the case management system for home pickup and moving (1) 2026-10-23 Valuedesign: unauthorized access to the Value Card house e-money service (2) 2026-10-23 Yamada Denki: unauthorized access to the Yamada Video and Smartphone Gold membership procedure pages (1) 2026-10-22 Capcom: unauthorized access to the CAPCOM ID member service (1) 2026-10-22 Fujicco: unauthorized access at its campaign entry contractor (1) 2026-10-22 Goldenway Japan: FXTF trading credentials stolen through an attack on an external VPS (1) 2026-10-22 KOMOJU: unauthorized access to payment and CRM systems (1) 2026-10-22 Level Enter: unauthorized access to the AI.R-Scorer essay scoring service (3) 2026-10-22 Lintec: unauthorized access to some systems (1) 2026-10-22 Net Protections: unauthorized access to the NP Atobarai invoice reissue system (1) 2026-10-22 Okinawa Prefecture: unauthorized access to the administrative document catalog (1) 2026-10-22 Speee: unauthorized logins to group partner dashboards (2) 2026-10-22 Spiral LOCAS: unauthorized access to the municipal staff call-up system (2) 2026-10-22 System5: unauthorized access to a system linked to the online shop (1) 2026-10-22 TechnoHill: cyberattack on 1FEdu, a radiation exposure training site run for the health ministry, leaked 6 learners' passwords and led to unauthorized logins (2) 2026-10-22 VALTEC: unauthorized access; customer data may have leaked (1) 2026-10-21 Aeon: unauthorized access to 42 group websites (3) 2026-10-21 RAKUS Light Cloud: unauthorized access to the blastmail email delivery service (47) 2026-10-21 Recruit: unauthorized access to Carsensor.net and C-MATCH (1) 2026-10-21 Digital Arts: unauthorized access to its cloud service operations (1) 2026-10-21 Future Shop: unauthorized access to its servers (2) 2026-10-21 JFE Chemical: intrusion into its IT environment (1) 2026-10-21 Monitas: SQL injection attack on the Qzoo survey site (1) 2026-10-21 Okinawa Tourist Service: personal data of up to 730,000 people leaked from its booking services (1) 2026-10-21 GMO Internet: unauthorized access to Onamae.com Desktop Cloud (5) 2026-10-21 OTOTOY: unauthorized access to the OTOTOY music store (1) 2026-10-21 php2shell: critical flaws in PHP (608) 2026-10-21 PingCAP: unauthorized access to internal systems (1) 2026-10-21 Sankei Living Shimbun: unauthorized access to its servers (3) 2026-10-21 Shinryo: cyberattack causes a system outage (1) 2026-10-21 Taketa: employee improperly acquires about 60,000 municipal records (1) 2026-10-21 Valuence Japan: unauthorized access to the online purchase system (1) 2026-10-20 Fuji-Q Highland: unauthorized logins to its app and member site (1) 2026-10-20 Fuji TV: unauthorized access to the programme promotion system (1) 2026-10-20 Trustbank: unauthorized access to Furusato Choice (1) 2026-10-20 Globee: unauthorized access to systems behind the abceed English learning service (1) 2026-10-20 GoWeb Cloud: SQL injection attack on the GoWeb real estate service (3) 2026-10-20 Hakuhodo: unauthorized operation of the Housing Energy Saving 2024 campaign office system (2) 2026-10-20 Aidma Holdings: unauthorized access to the Mamaworks remote job site (1) 2026-10-20 Mie Prefecture: health promotion website defaced (1) 2026-10-20 Monex: account opening paused as a precaution after attempted unauthorized access (1) 2026-10-20 Tamanoya and Kigetsudo Celeo: unauthorized access to the funeral flower ordering systems (2) 2026-10-20 Youji Katsudo Kenkyukai: break-in at its company network; effect on data under investigation (1) 2026-10-19 Ashiya Gakuen: attackers exploited a flaw in its campus systems and left traces of access to personal data in a database (1) 2026-10-19 Crypton: unauthorized access to the SONICWIRE and D2R services (1) 2026-10-19 Entouch: ransomware attackers got into the database of its remote detailing service for drug makers; names and hospitals of healthcare workers leaked (2) 2026-10-19 Hankyu Hanshin Department Stores: unauthorized access to booking and other sites leaks H2O ID member data (2) 2026-10-19 HANOWA: cloud storage of the Hanowa dental staffing service was open to anyone for over six years, with ID images and data of up to 49,309 people (1) 2026-10-19 hokan: attackers abused account sign-up for the hokan Suito service for insurance agencies and took policy data of two agencies' customers (2) 2026-10-19 JETRO: unauthorized access to its websites (1) 2026-10-19 Link Station: attackers exploited a flaw in the organizer service Gettii-Lite and took 317,971 member IDs and more from the GETTIIS ticket service (1) 2026-10-19 LIXIL: break-in at the L-Pocket app for remodeling contractors leaked data of 3,379 registered users and staff (1) 2026-10-19 SoftBank: member sites taken offline after an unauthorized access attempt on My SoftBank (1) 2026-10-19 NIFTY: unauthorized access to the line application management system (1) 2026-10-19 PAPYLESS: suspected unauthorized access; Renta! suspended (1) 2026-10-19 Rakumachi: credential stuffing on the Rakumachi property investment site exposed incomes and assets of up to 3,450 people through agent accounts (1) 2026-10-19 Square Enix: unauthorized logins to Square Enix accounts (1) 2026-10-19 Japan Post Holdings: credential stuffing against Yu ID (1) 2026-10-19 Ymirlink: break-in at the Cuenote FC email delivery service exported about 51.6 million records from 49 customer systems (31) 2026-10-19 Z-kai: unauthorized logins to the Z-ID system (1) 2026-10-19 ZIGZAG: break-in at the WorldShopping cross-border shopping service leaked names and addresses of 301 overseas customers (1) 2026-10-18 Business Tech: unauthorized access to Ashikaga City's crematorium booking system (2) 2026-10-18 Japan Football Association: attack on the JFA Passport app (1) 2026-10-17 Joshin: unauthorized access (1) 2026-10-17 2nd Retailing: unauthorized access to GEO and 2nd STREET systems (1) 2026-10-16 Astemo: unauthorized access to its data sharing cloud (1) 2026-10-16 NTT Solmare: unauthorized access to the Comic Cmoa e-book store (1) 2026-10-16 FANCL and Attenir: unauthorized access to their online shops (2) 2026-10-16 Trade Works: unauthorized access leaks IwaiCosmo Securities customer data and places orders (2) 2026-10-16 Japan Arts: phishing took over an employee's Google account; 5,376 contacts were taken and spoofed emails sent (1) 2026-10-16 Mitsubishi Gas Chemical: HR system contractor T4C emailed a file with names and staff numbers of 2,092 former employees to another company (2) 2026-10-16 Nikkei: unauthorized access to the cloud service it uses for system development (1) 2026-10-16 Nikken Gakuin: break-in at the system for a condominium manager course; personal data of 3,597 trainees may have leaked (2) 2026-10-16 Sumitomo Mitsui DS Asset Management: it detected unauthorized access at the contractor behind its direct-sales fund site and took My Page offline for about 10 hours (1) 2026-10-16 STANDS: break-in at the admin screen of the Onboarding UI tool; client settings were taken and some changed (1) 2026-10-16 Studio: unauthorized access to the cloud environment of the Studio website builder (35) 2026-10-16 WASABI: unauthorized access to the WASABI SWITCH order and inventory system (4) 2026-10-15 Beauty Garage: unauthorized access to its online store (1) 2026-10-15 Burger King: app member data leaked (1) 2026-10-15 Kobo: unauthorized access to the Hassha Orai Net partner API server (1) 2026-10-15 M3: unauthorized access to the MR-kun service for drug makers (1) 2026-10-15 Maruki Medical Systems: cyberattack stops orders and shipping (1) 2026-10-15 Medley: unauthorized access to the @link clinic system (1) 2026-10-15 Daiwa Institute of Research: unauthorized access to Naito Securities' online trading system (2) 2026-10-15 Nippon Life Hospital: a home nursing station worker fell for a tech support scam; data of 253 people, including patients' care levels, may have leaked (1) 2026-10-15 Sourcenext: mass leak of member data (1) 2026-10-14 Aena: unauthorized access to its shopping app (1) 2026-10-14 Carry: attackers sat in the server of the Lili matching site for three months; passwords and ID images of about 98,000 members may have leaked (1) 2026-10-14 NTV Wands: unauthorized login to the admin screen of the FaveConnect fan club platform; member data of 117,392 accounts in two fan clubs may have been viewed (1) 2026-10-13 East Japan Mitsubishi Motor Sales: unauthorized login to an employee's Microsoft 365 account sent 825 spoofed emails (1) 2026-10-13 Fivot: unauthorized access to the IDARE cashless payment service (1) 2026-10-13 Golf Digest Online: unauthorized access to its servers (1) 2026-10-13 NEXT STAGE: a fake account in the Metabase BI tool it uses internally could search the database of its building inspection services; up to about 40,000 records at risk (1) 2026-10-13 Ride On Express: ransomware at the server operator holding Gin no Sara customer data (1) 2026-10-13 Arcadia: unauthorized access to the SpeeCAN RAIDEN alert service (33) 2026-10-13 toypo: a flaw in the access controls of the toypo shop membership app leaked data of 697,209 users (4) 2026-10-12 Applabo: unauthorized access to its mail server (1) 2026-10-09 BOOKOFF: unauthorized access to the member system (1) 2026-10-09 coconala: unauthorized access to the coconala skill market (1) 2026-10-09 Commune: unauthorized access to the Commune community platform (12) 2026-10-09 Resorttrust: unauthorized access to the booking site (1) 2026-10-09 Adventure: unauthorized access to the skyticket back-office system (1) 2026-10-09 Adventure: skyticket bus booking pages viewable without login (1) 2026-10-09 Adventure: unauthorized access to skyticket servers (1) 2026-10-08 Nippon Columbia Group: malware on a Daiichikosho contractor's PC (2) 2026-10-08 Gakken: group sites down after unauthorized access to an external server (3) 2026-10-08 hi-ho: impersonation logins to My Page (1) 2026-10-08 hi-ho: competing sales agency logs in to customer pages (1) 2026-10-08 Lawson: unauthorized access to Lawson ID and Lawson app pre-orders (1) 2026-10-08 Uzabase: unauthorized access to an admin tool used by NewsPicks (1) 2026-10-07 H.I.S.: unauthorized access to its Thai subsidiary's file server (1) 2026-10-07 IDC Frontier: ransomware attack on IDCF Cloud (13) 2026-10-07 Toda: unauthorized access to the payment system (1) 2026-10-06 Active: SQL injection attack on its frozen food online store (1) 2026-10-06 dip: unauthorized access to the Baitoru and Baitoru NEXT job sites (1) 2026-10-06 Mr Max: unauthorized access to its app and online store (1) 2026-10-06 Iyaku Joho Net: unauthorized access to Asahi Kasei Therapeutics' Pharma DIGITAL site for healthcare professionals (2) 2026-10-06 Rakuten Mobile: Rakuten Drive data exposed through compromised administrative credentials (1) 2026-10-06 Weathercaster Network: its website was broken into and defaced; data of members and course applicants in up to 15,959 records may have leaked (1) 2026-10-05 Daiki Suisan: unauthorized access to its app (1) 2026-10-05 GMO Research & AI: unauthorized access to the infoQ survey site (1) 2026-10-05 i-plug: student names and emails in the response data of OfferBox pages for companies (1) 2026-10-05 Osaka Metropolitan University: attack on an NEC contractor disrupts systems and exposes information (3) 2026-10-05 Resorts Ryukyu: unauthorized access to the property management system used by Hotel Resort Inn Ishigakijima (1) 2026-10-05 Scala Communications: unauthorized access to the i-ask FAQ system (6) 2026-10-05 Yakiniku King: app member data leaked (1) 2026-10-04 Nikkei: unauthorized logins to an employee's Google Workspace account (1) 2026-10-04 Nikkei: Microsoft 365 account taken over and used for phishing emails (2) 2026-10-04 nimoca: unauthorized access to the usage history service (1) 2026-10-03 Recruit: registered email addresses identified through a flaw in StudySapuri (3) 2026-10-02 Sammy Networks: unauthorized access to 777CON-PASS (1) 2026-10-02 Abahouse International: unauthorized access to member and order data (1) 2026-10-02 Daiichi Life Group: unauthorized access to the HR system (2) 2026-10-02 National Tax Agency: other people's gift tax returns visible in e-Tax My Page (1) 2026-10-02 Green Coop Fukuoka: work laptop stolen (1) 2026-10-02 Japan Times: ransomware attack on the group's former administrative server (2) 2026-10-02 JOGMEC: unauthorized access to its information systems (1) 2026-10-02 Kodansha BECK: unauthorized access to an employee email account (1) 2026-10-02 Nichii Gakkan: backup file on the care services site downloadable without authentication (1) 2026-10-01 17:46 JAEA: unauthorized access to the JRR-3 research reactor support site (1) 2026-10-01 Daimaru Matsuzakaya Department Stores: other members' details shown in the app and online stores (1) 2026-10-01 Lashinbang: unauthorized access to its services (1) 2026-10-01 Nippon Rent-A-Car: separate attack on its app (1) 2026-10-01 Ticketplus: other users' details shown on the Tickeplus e-ticket site (1) 2026-09-30 Benefit One: other companies' employee data in survey downloads (1) 2026-09-30 G-Plan: unauthorized access to the G-Point system (1) 2026-09-30 Sagawa: unauthorized access to the parcel tracking service (4) 2026-09-30 Shudo Gakuen: unauthorized access to a server (1) 2026-09-29 eplus: unauthorized access to the e-ticket refund system (1) 2026-09-29 Japan Post: unauthorized access to the Post Office App (1) 2026-09-29 Seicomart: unauthorized access to the Seicomart app (1) 2026-09-29 TOPPAN: Sompo Japan policyholder data sent to another insurer (2) 2026-09-29 Unirita: unauthorized access to its document management system (1) 2026-09-29 Yamato Transport: unauthorized access to Kuroneko deferred payment (1) 2026-09-28 Resona Bank: microfiche with records of closed accounts lost (1) 2026-09-28 Shueisha: unauthorized access to the HAPPY PLUS COMMUNITY blogger system (1) 2026-09-28 Temairazu: unauthorized access to the TEMAIRAZU hotel booking management service (1) 2026-09-27 Starts Publishing: unauthorized access to the OZmall booking site (1) 2026-09-27 Tokyo Metro: unauthorized access to the Metpo member service (1) 2026-09-26 Keio: ransomware attack on the group (1) 2026-09-26 Nippon Rent-A-Car: unauthorized access to its app (1) 2026-09-25 Fines: unauthorized access to its booking system (1) 2026-09-25 Japan Post: unauthorized access to the web service for international mail inquiries (1) 2026-09-25 Saga University: ransomware attack on its administrative NAS (1) 2026-09-25 Times Mobility: Times Car member data and licence images leaked (1) 2026-09-20 GMO Internet: attackers planted malicious programs on some ConoHa WING servers, affecting data in the web server areas of 426 customers (1) 2026-09-18 JGC Digital: a flaw in the BI tool Metabase was exploited and data of about 60,000 accounts of its construction-site service Azas and clothing-collection service Suloop was taken (1) 2026-09-17 Asahi Kasei: former employee passed trade secrets to a Chinese company (1) 2026-09-16 Daiko Printing: a card-stealing program sat on the PhotoGoods checkout page for about five weeks, so card numbers and security codes may have leaked (1) 2026-09-16 Helpfeel: unauthorized access to the Gyazo image sharing service (1) 2026-09-15 Ainokaze Toyama Railway: unauthorized access to the Ichiman Sanzen Shaku Monogatari tourist train seat system (1) 2026-09-15 LEAN BODY: unauthorized access to its data analysis tool (1) 2026-09-15 Odawara Engineering: email account taken over and used for impersonation (1) 2026-09-11 Digital Agency: unauthorized access to the Government Solution Service (1) 2026-09-11 Rohto Pharmaceutical: unauthorized access to its mail order systems (1) 2026-09-09 ApplyNow: unauthorized access to its recruiting platform (2) 2026-09-08 Kyoto Sanga F.C.: fan club member list sent by mistake (1) 2026-09-08 Nippon Trex: unauthorized access to its information systems halted internet ordering and other services; no data leak was found (1) 2026-09-08 Rikkyo University: Google accounts of six students and alumni were accessed without authorization and 17,668 spam mails were sent (1) 2026-09-07 Institute of Science Tokyo: unauthorized access to its IT infrastructure (1) 2026-09-03 Tottori Prefecture: the main server of its environmental radiation monitoring system was hit by ransomware and stopped; the backup server was unaffected (1) 2026-09-02 RIZAP: employee uploaded health guidance data to an outside generative AI service (3) 2026-09-02 Seibu Railway: 52 Seats of Happiness booking data viewable from outside (1) 2026-09-01 Mitsui Fudosan: unauthorized access to a system used by the group (1) 2026-08-31 Ando Hazama: employee tricked by a fake police officer into sending business card data (1) 2026-08-31 Portus: ransomware attack (2) 2026-08-30 Mandarake: unauthorized access to its servers (1) 2026-08-28 Co-op Yamaguchi: unauthorized access to the LINE mini app database (1) 2026-08-28 Corona: unauthorized access to the cloud service for installation records (1) 2026-08-28 Kind Oal: unauthorized access to an e-commerce platform staff account (1) 2026-08-28 T&K TOKA: ransomware attack (1) 2026-08-28 Yellow Hat: unauthorized access to the online service booking system (1) 2026-08-27 Zurich: unauthorized access to the Z-Dash dashcam upload system (1) 2026-08-25 Cover: unauthorized access to the hololive OFFICIAL CARD GAME website (1) 2026-08-24 All Nippon Airways Trading: unauthorized access to the Eraberu e-GIFT corporate gift service (1) 2026-08-24 Fancrew: credential stuffing attack on the mystery shopper service (1) 2026-08-21 Rakuten Books Network: intruders reach work PCs holding 33,333 Rakuten Books delivery addresses (2) 2026-08-20 Expo 2025 Osaka, Kansai, Japan: unauthorized access to a subcontractor's Microsoft 365 account (1) 2026-08-18 VOISING: unauthorized access to a BI tool it uses (1) 2026-08-18 Weblife: unauthorized access to the customer management system of its OEM website-building service may have leaked data of up to 7,425 people (1) 2026-08-17 SAKURA internet: unauthorized access to rental servers and the sales system (1) 2026-08-15 Ryomo Systems: ransomware attack (5) 2026-08-14 T museum: Unko Museum website tampered with (2) 2026-08-13 Akatake Engineering: ransomware encrypted files on its servers; data of about 11,700 employees and business contacts may have leaked (1) 2026-08-13 Charm: unauthorized access to its pet supplies online store (1) 2026-08-13 Tokyo Gas Network: work laptop lost (1) 2026-08-12 White Essence: unauthorized access to its booking site and core system (1) 2026-08-10 REXT: ransomware attack on the headquarters and store network (2) 2026-08-10 RIZAP: unauthorized access to the APORITO online store (1) 2026-08-07 JST: unauthorized access to staff mailboxes (1) 2026-08-06 Ambition DX Holdings: ransomware attack (1) 2026-08-06 CEC: ransomware attack on its Tokyo No. 2 datacenter (1) 2026-08-06 Nice: unauthorized access to a mail account it manages may have leaked about 2,400 personal data records, and the account was also used to send spam (1) 2026-08-05 Kyodo News: staff accounts misused (1) 2026-08-04 Chubu Electric Power: unauthorized access to email and contacts (1) 2026-08-04 Innovation: unauthorized access to its GitHub (1) 2026-08-03 Kodansha: unauthorized access to a company email account (1) 2026-08-03 M&S Food Service: unauthorized access to the takeout order site of "Miyamoto Munashi" may have leaked up to 1,895 order records (1,030 people) (1) 2026-08-03 Toshiba Tec: a procedure document wrongly contained an administrator account, so one user company of its cloud system "ShopCraft" could view customer data of 382,123 people of other users (1) 2026-08-01 Estore: shopper data leaked from ShopServe (2) 2026-07-31 EPARK Relax & Esthe: unauthorized access to the PeakManager booking system (1) 2026-07-29 C-Connect: the payment application of its online shop "Ink Kakumei" was tampered with, and card information of 24,166 customers may have leaked (1) 2026-07-29 Life Insurance Association: user data viewable in the policy inquiry system (1) 2026-07-27 Fine: the web server of its online shop was hacked and tampered with, and 912 credit card records may have leaked (1) 2026-07-26 NTT SmartConnect: unauthorized access to Smile Server (1) 2026-07-24 CMIC HealthCare Institute: unauthorized access to the system of the patient support program "RA Connect" it runs under contract leaked information of 1,940 patients, medical professionals and client staff (1) 2026-07-24 murauchi.com: unauthorized access (1) 2026-07-22 Fuso Dentsu: a shared folder in the cloud storage it uses with outside parties was accessed without authorization, and 26,489 personal data records may have leaked (1) 2026-07-16 Nissan Chemical: unauthorized logins to its cloud environment (1) 2026-07-14 FIVE FOXes: its servers may have been hit by ransomware, and personal data of 67,907 customer records and 5,278 employee records may have leaked (1) 2026-07-14 Media4u: unauthorized access to its SMS delivery system (1) 2026-07-13 Nichirei: cyberattack (1) 2026-07-13 Nihon Kotsu: malware attack (1) 2026-07-03 TV Asahi Mediaplex: unauthorized access to a server may have leaked 4,543 personal data records of employees, applicants and individual business partners, including My Number (1) 2026-07-02 Meitetsu Kyosho: ransomware attack (2) 2026-07-01 Kaga Solution Network: unauthorized access to the Academico Navi student PC store (3) 2026-06-30 Aflac Life Insurance Japan: unauthorized access to online systems (1) 2026-06-30 Musashino University: ransomware; files in shared folders were taken (1) 2026-06-30 Norinchukin Bank: production data got into a modification test and 3,176 personal data records of JA Sapporo members were wrongly provided to JA group bodies and a contractor (2) 2026-06-30 REQREA: a misconfiguration of the cloud storage behind its electronic check-in system "Tabiq" left identity-document images of 1,060,338 people accessible from outside (1) 2026-06-23 KDDI: unauthorized access to its mail system for ISPs (7) 2026-06-23 NTTPC Communications: part of the servers behind its "WebARENA" large-file transfer function were breached and the function was stopped; it is expected to resume around December 2026 (1) 2026-06-22 Faith Group: ransomware attack (1) 2026-06-22 Hands Holdings: ransomware attack (1) 2026-06-19 Delightful: unauthorized access to the Meruhaikun email delivery system (4) 2026-06-19 Gendai Butsudan: unauthorized access to its service network (1) 2026-06-16 Komatsu: misconfigured external user directory (1) 2026-06-16 Mikasa: data may have leaked from a disposed PC (1) 2026-06-15 Act-Sen: ransomware attack on its work management system (1) 2026-06-15 Factory Japan Group: unauthorized access to its servers (1) 2026-06-15 Saga Hirakawaya: card data leaked from its online shop (1) 2026-06-12 D&M: ransomware attack (1) 2026-06-11 Jelly Beans Group: a third party posing as an officer or employee gave a false remittance instruction and about 45 million yen was sent to an outside account (1) 2026-06-10 Kaizen Tech Agent: suspected data theft by a former employee (1) 2026-06-10 Kyushu University: a lab terminal appears to have been infected with ransomware, and a leak of 43 patients' names and surgery video data cannot be ruled out (1) 2026-06-08 Kyushu Electric Power Transmission and Distribution: backup media missing (1) 2026-06-05 en: credential stuffing attack on the Middle no Tenshoku job site (1) 2026-06-05 Sen: unauthorized access to Hai Cheese! Photo (1) 2026-06-04 Shokusou: ransomware attack (1) 2026-06-04 Visual Arts: unauthorized access to its cloud storage (1) 2026-05-30 Career Design Center: a credential-stuffing attack on the "Onna no Tenshoku type" job site led to 38,442 unauthorized logins by 18,253 users (1) 2026-05-28 Asoview: unauthorized access to the satsuki booking system (1) 2026-05-28 Polaris Holdings: unauthorized access to its Booking.com account (1) 2026-05-21 Geniee: unauthorized access to GENIEE MA (1) 2026-05-21 Sodick: unauthorized access to its servers (1) 2026-05-19 Ishikawa Computer Center: unauthorized access to the attachment-separation mail server (1) 2026-05-15 CKC Network and Gakusan: ransomware attack on the inquiry system (2) 2026-05-15 CS Accounting: unauthorized access to its servers (1) 2026-05-14 Nihon Shisan Souken: ransomware attack (1) 2026-05-12 Oriental Diamond: ransomware attack (1) 2026-05-12 Tokyo Hoso Kogyo: ransomware attack (1) 2026-05-09 Matsuzawa Shoten: ransomware attack (1) 2026-05-08 JR Tokai Takashimaya: unauthorized access to the part-time staff system (1) 2026-05-08 Nihon Wasou Holdings: a false remittance instruction led to 50 million yen flowing out (1) 2026-05-07 East: unauthorized access to its internal network (1) 2026-05-01 Money Forward: unauthorized access to its GitHub (1) 2026-05-01 Tohoku University: intrusion into university servers and Tohoku University Hospital NAS (2) 2026-04-30 Toyota Mobility Parts: intrusion into James member servers (1) 2026-04-28 Marutake: ransomware attack (1) 2026-04-28 Cabinet Office Okinawa General Bureau: its dedicated FileZen server was breached and personal data it held may have leaked (1) 2026-04-27 Bonform: its online store was accessed without authorization and credit card data of 3,268 customers leaked (1) 2026-04-24 Aioi Nissay Dowa Insurance: an employee seconded to Toyota Motor improperly provided Toyota internal information (2) 2026-04-24 Hatena: following a false transfer instruction from a malicious third party, funds were sent from an employee account to outside accounts, a loss of up to about 1.1 billion yen (1) 2026-04-24 Mitsui Sumitomo Insurance: several employees seconded to Toyota Motor leaked information held by Toyota (2) 2026-04-23 Yellow Hat: member data taken through the 2Rinkan app API (1) 2026-04-19 BELFOR Japan: BELFOR Asia and all group companies in the region were cyberattacked and all IT systems were shut down; the group "INC Ransom" published stolen data (1) 2026-04-14 Start dash: user account data of "Kyuun" was found on sale on an overseas site, with 39,267 users affected (1) 2026-04-13 Ibiden: rogue web pages were displayed on its website; permanent measures were applied and the site fully recovered (1) 2026-04-10 T&D Holdings: it published survey results on employees seconded to insurance agencies who improperly took information (1) 2026-04-10 UPSIDER: supply chain attack through open source software (1) 2026-04-09 NYK: unauthorized access to the marine fuel procurement system (1) 2026-04-08 ielove GROUP: unauthorized access to the ielove CLOUD real estate service (1) 2026-04-03 Awa Bank: unauthorized access to an OA system test environment (1) 2026-04-03 CAMPFIRE: unauthorized access to its GitHub account (2) 2026-04-03 YCC Information System: ransomware attack (7) 2026-03-30 Cota: cyberattack causes a system outage (1) 2026-03-30 Nara Women's University: a misconfigured outgoing mail server was abused by a third party to send 178,782 spam mails (1) 2026-03-30 Saitama University: the server running its outsourced patent management system was breached, with traces of ransomware, and stored data may have been viewed from outside (1) 2026-03-27 Bank of Fukuoka: an employee seconded from MetLife took life insurance contract information handled at the bank without permission and leaked it to MetLife (2) 2026-03-27 ZUU: a third party posing as an officer or employee gave a false transfer instruction in business chat and 96 million yen was sent to an outside account (1) 2026-03-26 Zynas: cyberattack on Joyfull's HR contractor (2) 2026-03-26 MoonStar: unauthorized access to system servers (1) 2026-03-24 Cynd: unauthorized access to the BeautyMerit booking system (1) 2026-03-24 MLIT and Hakuhodo: the mail server used by Hakuhodo, administrator of the Child-Rearing Eco-Home Support Project, was misused and up to 202,581 spam mails may have been sent (2) 2026-03-23 Omikenshi: ransomware attack (1) 2026-03-19 Mazda: unauthorized access to a parts warehouse system (1) 2026-03-18 NHK: a notice mail was sent to every registrant of its information system by mistake, exposing 32,940 email addresses to other recipients (1) 2026-03-17 Medicus Shuppan, Publishers: ransomware attack (1) 2026-03-17 Nippon Telenet: a ransomware-type attack encrypted some server files; no trace of data being sent outside was found (5) 2026-03-16 Iwatani: unauthorized access to group systems (1) 2026-03-09 Uchiyama Holdings: ransomware attack (1) 2026-03-06 Murata: intrusion into the information-sharing system (1) 2026-03-06 PGF Life: investigation found 11 seconded employees took 379 items of information at seven agencies; executives voluntarily returned pay (1) 2026-03-06 Seed Planning: ransomware attack (4) 2026-03-03 Shiraume Toyooka Hospital: ransomware attack on the hospital and care home (1) 2026-02-19 Advantest: ransomware attack (1) 2026-02-14 Washington Hotel: ransomware attack (1) 2026-02-13 Nishiyama Seisakusho: ransomware attack on its network (1) 2026-02-13 Nippon Medical School Musashi Kosugi Hospital: ransomware attack (1) 2026-02-13 BEENOS: unauthorized access to the Sekaimon overseas shopping service (1) 2026-02-12 Dai-ichi Life Group: 64 employees seconded to 28 insurance agencies improperly obtained information (1) 2026-02-12 Ficha: ransomware attack on its servers (1) 2026-02-12 Gala Yuzawa: ransomware attack on the lift ticket system (1) 2026-02-12 Mynavi: unauthorized access to a cloud service it uses (1) 2026-02-10 Japan Airlines: same-day baggage delivery reservation system failure traced to a contractor employee deleting and changing log records (1) 2026-02-09 Nittai Kogyo: malicious files were placed on the server of its "N Trading" online shop, so 3,887 member records may have been viewed (1) 2026-02-06 GEX: ransomware attack (1) 2026-02-05 At Home: unauthorized login to the moving quote system (1) 2026-02-05 BTCBOX: documents shared with a partner became viewable by third parties and included 39 customers' personal data; all services were suspended and the Kanto Local Finance Bureau ordered a report (1) 2026-02-04 Anabuki Kosan: ransomware attack on the group (1) 2026-02-04 F-one: ransomware attack (1) 2026-02-03 Anabuki Housing Service: ransomware attack on the group (1) 2026-02-03 Hosokawa Micron: unauthorized cloud storage login (1) 2026-01-30 MC Retail Energy: a cyberattack on a server managed by an outsourcee suspended applications and rate simulation for its Machi-ene service (1) 2026-01-27 SoftBank: a proxy server defect showed other customers' information in My SoftBank and swapped MMS sender identities (1) 2026-01-26 Interix: card data leaked from the Just Curtain online shop (1) 2026-01-23 Ministry of Agriculture, Forestry and Fisheries: withholding slip data sent to a wrong email address put My Numbers and other data of 4,571 staff and family members on an outside mail server (1) 2026-01-22 Sincere: ransomware attack (1) 2026-01-21 Suntory: unauthorized access at a PR contractor (1) 2026-01-20 Tombow Beverage: ransomware attack (1) 2026-01-19 JR Kyushu: unauthorized access to the group network (1) 2026-01-08 Kowa Emori: ransomware outage (1) 2026-01-08 Okinawa Prefectural College of Nursing: ransomware attack on its academic system (1) 2026-01-08 Smaregi: store customer data leaked from an app linked to its POS (2) 2026-01-06 CANVASs: ransomware attack on its licensing server (1) 2026-01-06 Mizuho Leasing: unauthorized access to a power investment system (1) 2026-01-05 CAC: unauthorized access to the Academic Support Navi donation service (1) 2025-12-30 K.UNO: web system intrusion (1) 2025-12-26 Keio University: intrusion into the SFC email system (1) 2025-12-25 Alcare: work phone account taken over (1) 2025-12-25 WOWOW: unauthorized logins to WOWOW WEB accounts; access to My WOWOW and changes to registered information confirmed for some customers (1) 2025-12-24 SKY Perfect JSAT: unauthorized access to the web server of the browser viewing site of its program distribution service (1) 2025-12-23 FUJIFILM Medical: sales system intrusion (1) 2025-12-22 Tokushima University Hospital: unauthorized access to a system it manages may have leaked 16,945 patient records (1) 2025-12-19 TOKAI Communications: unauthorized access to OneOffice Mail Solution (1) 2025-12-18 Kawamoto Pump Mfg.: inquiry data leaked (1) 2025-12-17 Omnibus Japan: ransomware hit the Tohokushinsha group company, encrypting some files; publication of client information on a leak site was confirmed (1) 2025-12-17 Takara Standard: unauthorized access to a system at its Shikoku branch found and the network cut off; unauthorized activity also detected at its EC site (1) 2025-12-17 Yokosuka Gakuin: ransomware hit its server and multiple photos and videos leaked (1) 2025-12-15 Kurashiki Central Hospital: an unencrypted USB drive holding personal data on 1,162 patients was lost, and a leak cannot be ruled out (1) 2025-12-15 Saitama University: a misconfigured GPA distribution tool left a list of student numbers and GPAs of 8,373 enrolled students viewable (1) 2025-12-12 Tokyo Hanyaku: website defaced (1) 2025-12-08 LogicVein: a ransomware attack may have leaked data of about 97,338 people, and data of 17,559 of them was posted on a dark-web leak site (1) 2025-12-08 TOC: unauthorized access to its network encrypted some of its files (1) 2025-12-05 Nissan Motor: unauthorized access to the data server of its development contractor Red Hat leaked data on about 21,000 customers of Nissan Fukuoka Sales (1) 2025-11-28 Mitsubishi Paper Mills: intrusion through remote access (1) 2025-11-27 Shin Nihon Kentei Kyokai: ransomware attack (5) 2025-11-26 YAC Holdings: its consolidated subsidiary YAC Garter was hit by ransomware, with the effect on consolidated results expected to be minor (2) 2025-11-21 Juntendo University: ransomware hit a NAS run independently by its Women's Sports Research Center, with a possible information leak; hospital operations were not affected (1) 2025-11-21 STNet: unauthorized access to the dedicated network of its cloud server service may have leaked personal data of 20,846 corporate and organizational contacts (1) 2025-11-17 Sakata Seed: unauthorized access to its servers may have started from a public remote-access server and given the attacker administrator rights (1) 2025-11-13 Tokai Software Development: ransomware leaks Tokai University data (2) 2025-11-11 Gakken Medical Support: account permission error (1) 2025-11-11 National Diet Library: development environment intrusion; suspected leak ruled out (2) 2025-11-07 Shinhokoku Material: ransomware hit its servers, encrypting some files and deleting some backup data (1) 2025-11-06 Bandai Namco Filmworks: unauthorized access to "Bandai Channel" may have leaked up to 1.366 million member records, and all services were suspended until December 19 (1) 2025-11-06 Kobayashi: server data stolen (1) 2025-11-05 Japan Business Systems: unauthorized access to its systems found through suspicious communication logs, with cause and scope under investigation (1) 2025-11-04 Nikkei: unauthorized access to its Slack (1) 2025-10-31 Universal Music: unauthorized access to UNIVERSAL MUSIC STORE and other online stores (1) 2025-10-31 Wave: the system managing its web upload service for print orders was breached, and up to 176,810 customer records may have leaked (1) 2025-10-30 Seiyu: an attack on the shift scheduling tool of US vendor Blue Yonder leaked employee IDs, names and birth dates of 30,508 current and former staff (1) 2025-10-24 Albion: an attack on the external provider of an in-house system may have leaked 5,613 records on current and former staff (1) 2025-10-23 Enessance: ransomware attack (2) 2025-10-22 Katayama Shoji: the payment application of the "Nature Katayama Online Store" was tampered with, leaking 1,049 card records (1) 2025-10-20 Fukuyoshi: card data at its online shop may have been exposed (1) 2025-10-19 Askul: ransomware attack (3) 2025-10-16 Laurel Bank Machines: ransomware hit its AI-OCR service "Jijilla", and about 223,000 survey and record forms of clients of Nomura Research Institute, Hiroshima Bank, Keio University and others may have leaked through the outsourcing chain (6) 2025-10-15 Sagawa: unauthorized logins to Smart Club (1) 2025-10-14 Yamato Transport: former employee took business partner data (1) 2025-10-04 Mino Industry: ransomware attack (1) 2025-10-03 JFC: data exposed by the business plan application system (1) 2025-10-03 Mynavi: device management cloud misconfiguration (1) 2025-09-29 Asahi Group: ransomware attack (1) 2025-09-19 Chuo University: two faculty email accounts were misused, and the names and email addresses of up to 1,082 people who had emailed them may have leaked (1) 2025-09-19 Pasona: support scam exposes a PC used in a Tokyo job-matching program (2) 2025-09-19 Starbucks Coffee Japan: an attack on the shift scheduling tool of US vendor Blue Yonder leaked employee IDs of about 72,200 current and former staff (1) 2025-09-17 Yamamoto Paper Packaging: the payment application of "Package Shop.jp" was tampered with, and data on 3,973 customers, including 1,395 card records, may have leaked (1) 2025-09-16 MLIT Kinki Regional Development Bureau: unauthorized access to its network may have leaked personal data of Cabinet Office Okinawa General Bureau staff on the connected network (1) 2025-09-11 Kyoto Institute of Technology: a design flaw in its academic system left personal data on 2,539 students and others viewable from outside since the system was introduced in 2011 (1) 2025-09-10 Community Network: CN Playguide personal data may have been exposed (1) 2025-09-10 Nikke: server intrusion and data leakage (1) 2025-09-09 Tiger Chiyoda: ransomware attack (1) 2025-09-08 Sakai City Cultural Foundation: a former employee took data on 37,164 ticket members and leaked part of it, including staff and councillor details, on X and by email (1) 2025-09-03 CBC: unauthorized access to its servers caused a company-wide system outage across its Japan operations (1) 2025-09-02 Ryochi: server intrusion (1) 2025-08-29 Huis Ten Bosch: ransomware attack (1) 2025-08-25 Accretive: unauthorized access to its servers caused a system outage and also affected its client Japan Shooter (1) 2025-08-22 Nihon Plast: development center server intrusion (1) 2025-08-22 Shibaura Institute of Technology: a teacher's VPN account was abused from abroad to probe its authentication server, and student and staff names and email addresses may have leaked (1) 2025-08-21 Seino: intrusion into its web services (1) 2025-08-18 Raymay Fujii: ransomware encrypted files on some servers, and it suspended servers, its intranet and other systems (1) 2025-08-16 Sunrise: ransomware encrypted data on the file server of this subsidiary of supermarket chain Okuwa (1) 2025-08-15 Miura: network intrusion (1) 2025-08-08 Mitsubishi Auto Leasing: an attacker exploited a new flaw in its mobile device management server and 1,166 staff records, including password hashes, leaked (1) 2025-08-08 Nippon Columbia: intruders used a network device flaw to reach its server and three group firms were hit, and 3,317 personal records of staff, families and others may have been viewed (1) 2025-08-08 Suruga-ya: the payment page of "Suruga-ya.JP" was tampered with, and 30,431 card records of about 30,000 customers may have leaked (1) 2025-08-08 USAC System: ransomware attack (1) 2025-08-06 Hosei University: an attack on its contractor Nippon Steel Solutions may have leaked the names and email addresses of 16,542 students and staff (2) 2025-08-04 Gujo Hachiman Industrial Promotion Corporation: the payment application of its "Gujo Hachimanya" shop was tampered with, and 2,972 card records and up to 6,920 personal records may have leaked (1) 2025-08-01 Mercedes-Benz Japan: a settings flaw in its warranty management system left personal data on about 15,200 customers who had filed warranty cancellations viewable from outside for seven days (1) 2025-07-28 Marubishi Holdings: ransomware disabled its business systems, and group staff My Numbers and partner contracts were leaked (1) 2025-07-25 AXA General Insurance: unauthorized access to the pet insurance system (1) 2025-07-23 Iwatake Resort: a malicious file was planted on its website server, and the names and addresses of 3,154 customers who used its web forms may have leaked (1) 2025-07-22 Kawasaki Setsubi Kogyo: ransomware encrypts its cloud servers (1) 2025-07-17 Uniden Holdings: intruders entered through a flaw at its Australian base and over the VPN, and ransomware encrypted servers holding about 4,000 personal records (1) 2025-07-14 PERSOL Cross Technology: an account setup error in a health checkup reservation system let a group company's HR staff download data on 11,704 employees (1) 2025-07-14 Shinko Shuppansha Keirinkan: SQL injection at Smart Lecture (1) 2025-07-14 Total Marriage Support: unauthorized access to its matchmaking event sites, with data of up to 910,795 people possibly leaked and 52 confirmed (1) 2025-07-12 Trustbank: unauthorized logins to LoGo Form (1) 2025-07-11 Mainichi Newspapers: credential stuffing on Mainichi Shimbun Digital logged into 21,752 IDs in three days, with no sign that personal data pages were viewed (1) 2025-07-11 Shinchosha: ransomware attack (1) 2025-07-11 Sony Network Communications: a third party obtained So-net user IDs and passwords and changed the email addresses of some customers without their consent (1) 2025-07-08 NS Solutions: zero-day intrusion (1) 2025-07-04 Kumagai Gumi: a staff member followed an SMS posing as a courier, and the Apple Account of a company iPhone was taken over, possibly leaking 1,238 contacts (1) 2025-07-03 The Pokémon Company: credential stuffing on Pokémon Center Online, with all member passwords reset and accounts suspected of tampering suspended (1) 2025-07-01 Shinko Plastics: ransomware attack (1) 2025-06-30 Furuno Electric: server intrusion (1) 2025-06-30 Gakuyu Publishing: SQL injection on the Aichi Zenken mock exam site may have leaked about 282,000 examinee records (1) 2025-06-30 Haruyama Holdings: ransomware encrypted several servers, stopping online shops and the point service, and 18,053 personal records may have been viewed (1) 2025-06-26 Yamada Corporation: ransomware through its VPN encrypted internal servers and stopped core systems for about three months, and applicant and shareholder data may have leaked (1) 2025-06-20 Fujisan Magazine Service: login abuse at Fujisan.co.jp; addresses may have been exposed (1) 2025-06-20 Gibraltar Life: data stolen from an MDM server (1) 2025-06-20 PAL: credential stuffing on its PAL CLOSET online store, 194,307 of 1,722,379 login attempts succeeded (1) 2025-06-20 Prudential Life: data stolen from an MDM server (1) 2025-06-20 System Exe: ransomware leaked partner personal data and login details, including about 14,000 member records entrusted by Tokyu Community (2) 2025-06-18 DAISO: Google Groups left publicly visible (1) 2025-06-14 Mizuho Bank: emails of 5,572 customers misdelivered to a partner, which then sent mismatched notices to customers (1) 2025-06-12 Rakumachi: attackers exploited a web server flaw, planted a backdoor and took data from the database, and personal data of about 563,000 members and inquirers may have leaked (1) 2025-06-11 SoftBank: customer data mishandled at contractor UF Japan (1) 2025-05-21 IKETEI: the payment application of its online shop was tampered with, possibly leaking 30,712 card records (1) 2025-05-20 Fordays: about 5.6 million abnormal requests hit its member site, possibly leaking names and addresses of 1,347,445 members (1) 2025-05-20 Resonac: ransomware attack (1) 2025-05-16 Miyagi Gakuin: ransomware and data leakage (1) 2025-05-15 Sanshodo: ransomware attack (1) 2025-05-14 Arc System Works: data leakage (1) 2025-05-12 Cool Japan Fund: server intrusion (1) 2025-05-08 Skylark: takeaway site intrusion (1) 2025-05-08 TOMOKU: ransomware encrypted group servers and stopped its online order system, and staff personal data and more may have leaked (1) 2025-05-07 PR TIMES: admin system intrusion; data may have leaked (1) 2025-05-02 Tokio Marine & Nichido: sending survey data to an agency, it wrongly included names and IDs of about 12,000 agents from other agencies (1) 2025-05-01 Gion: ransomware in its document management system (2) 2025-04-28 CIC: impersonators applied for its internet disclosure service, and credit information of 22 people may have been disclosed to third parties (1) 2025-04-28 Kintetsu World Express: ransomware caused a server failure that disrupted part of its operations, with no data leak confirmed (1) 2025-04-25 Chugoku Electric Power: unauthorized access to a remote connection device may have leaked data of 15,566 staff and contractors (2) 2025-04-25 Sompo Japan: web system intrusion; data may have been exposed (1) 2025-04-24 Konaka: DIFFERENCE order data leaked (1) 2025-04-23 Runtec: ransomware via a VPN device encrypted more than 20 servers and caused major delays in its fresh delivery service (1) 2025-04-18 Tokai University: ransomware disrupts systems (1) 2025-04-15 IIJ: data leakage from IIJ Secure MX Service (1) 2025-04-08 Michinori Holdings: attackers got into part of its network and some server files became temporarily unusable, with no sign of data leaving (1) 2025-04-08 Nippon Ceramic: ransomware and data leakage (1) 2025-03-31 Tokiwa and Tokiwa Industry: ransomware may have exposed data of about 421,000 members, and credit card payments were suspended for three months (2) 2025-03-25 Rakuten Securities, SBI Securities and others: accounts were taken over with phishing-stolen credentials, and holdings were sold to buy Chinese stocks (6) 2025-03-19 Recruit: Hokkaido Jalan member data may have been exposed (1) 2025-03-19 McDonald's Japan: a mail setup error exposed 8,989 customer email addresses to other recipients of app sign-up emails (1) 2025-03-18 Fast Retailing: staff and business-contact data may have been exposed (1) 2025-03-18 MinebeaMitsumi: file server intrusion (1) 2025-03-14 TOHPE: unauthorized access caused a system failure, with traces of 20,161 personal data records leaking (1) 2025-03-13 University of East Asia: data server intrusion (1) 2025-03-12 Oyatsu Company: unauthorized access (1) 2025-03-07 QST: a zero-day attack on its remote access device may have exposed registered names and email addresses (1) 2025-03-06 Chubu Centrair International Airport: its safety e-learning site for airport businesses was tampered with, possibly exposing 24,288 workers' records (1) 2025-03-06 Sunnet: inquiry attachments left publicly accessible (1) 2025-03-05 NTT Communications: corporate customer data may have been exposed (1) 2025-03-04 The Pokémon Company: a defect at the Pokémon Center Online relaunch may have mixed up the information of 326 members (1) 2025-02-27 Digital Technologies: intrusion and data leakage (1) 2025-02-27 O-M: ransomware attack (1) 2025-02-25 Hoken Minaoshi Hompo Group: ransomware attack (1) 2025-02-25 Kashiwazaki Seika: card data exposed at its online shop (1) 2025-02-21 Sony Music Solutions: Sony Music Shop cache settings showed other customers' data (1) 2025-02-18 Utsunomiya Central Clinic: ransomware attack (1) 2025-02-13 Square Enix: three DDoS attacks on Final Fantasy XIV on February 13, 14 and 17 disrupted connections to its North American data center (1) 2025-02-07 Oumiya: ransomware attack (1) 2025-01-27 Hands: Hands Club app breached; member data leaked (1) 2025-01-24 Junkosha: ransomware attack (1) 2025-01-22 Sanrio Entertainment: ransomware attack (1) 2025-01-20 Kaikatsu Frontier: unauthorized access to Kaikatsu CLUB and FiT24 member data (1) 2025-01-15 WECARS: customer data may have been disclosed through a former employee's phone synchronization (1) 2025-01-06 Square Enix: DDoS attack on Final Fantasy XIV caused connection problems at its North American data center for about ten hours (1) 2025-01-05 Japan Weather Association: repeated DDoS attacks on tenki.jp (1) 2025-01-02 NTT DOCOMO: DDoS attack disrupts goo and related services (1) 2024-12-31 Mizuho Bank: suspected DDoS attack makes Mizuho Direct and other online banking hard to reach (1) 2024-12-30 Hiroshima Prefecture: its "International Peace Hub Hiroshima" website was tampered with and data taken, putting names, emails and passwords of 3,858 registrants at risk (1) 2024-12-26 Japan Airlines: DDoS attack delays 71 flights (1) 2024-12-26 MUFG Bank: DDoS attack makes Mitsubishi UFJ Direct and other online banking logins unstable (1) 2024-12-25 444: intruders entered the TechFUL programming skills service via a development server, putting about 45,000 user accounts at risk, with a ransom demand (1) 2024-12-25 Fujikura: attackers entered through a VPN device managed by its maintenance contractor, and data with personal information left Sakura plant servers (1) 2024-12-13 Kyushu Tekko Center: ransomware encrypts files on several servers (1) 2024-12-12 EDUWARD Press: the payment application of its online store was tampered with, possibly exposing card data and logins of 13,433 customers (1) 2024-12-12 Hosei University: a faculty member saved personal data to a shared file server by mistake, making data of 1,683 people viewable by students and staff (1) 2024-12-11 Naniwa Pump Mfg.: ransomware through stolen credentials; employee data may have leaked (1) 2024-12-09 Sankei: personal data of 292,707 customers, including card data of 71,943, may have leaked from its old online shop (1) 2024-12-05 Iseki Hokkaido: ransomware; about 55,000 customer and employee records at risk (1) 2024-12-04 Denis Japan: ransomware hit group servers, and HR and health data of former employees and partner contacts may have been viewed (1) 2024-12-03 EXD: ransomware encrypts data on participants of Fukushima Prefecture and Koriyama City events (4) 2024-12-02 Kanagawa Arts Foundation: servers of the operator of the Kanagawa Prefectural Hall and other venues likely hit by ransomware (2) 2024-11-29 LY Corp: a LINE Album defect showed thumbnails of other users' album images, affecting over 120,000 users in Japan (1) 2024-11-26 Isetan Mitsukoshi: impersonation logins to ISETAN DOOR may have exposed names, addresses and more of 11,073 accounts (1) 2024-11-26 Oisix ra daichi: impersonation logins to Oisix.com may have exposed names, addresses and more of about 97,533 IDs (1) 2024-11-25 Gintoki: payment app of its official online shop tampered with, putting data of 17,171 people and cards of 1,850 at risk (1) 2024-11-20 Exceed Connect: Koriyama City KidZania event winners list emailed to the wrong address; 516 records at risk (2) 2024-11-19 Jupiter Shop Channel: unauthorized logins to its online store accessed about 15,000 accounts, possibly exposing names and addresses (1) 2024-11-15 Japan Electric Association: ransomware hits the newspaper division's business system with customer data (1) 2024-11-13 Axis Consulting: a former employee took data of 1,306 registrants and clients to a new employer, leaking names and addresses (1) 2024-11-13 biima: a CSV of about 23,000 members' data was attached by mistake and sent to 53 members, leaking account details and more (1) 2024-11-13 Television Saitama: unauthorized access to its website server may have leaked about 39,000 viewer submissions from prize and feedback forms (1) 2024-11-08 AIS: ransomware; business partners' personal data may have leaked (1) 2024-11-08 Toyota Mobility Tokyo: employee temporarily lost a personal USB stick holding data of 9,489 staff and others (1) 2024-11-08 Welcia Yakkyoku: support scam gave remote access to an employee's PC; data of about 40,000 Welcia.com customers at risk (1) 2024-11-06 Tohoku Gakuin: ransomware on a work PC leaks 7,085 records including student grades (1) 2024-11-01 Club Tourism: intrusion into a server under construction put 3,349 overseas tour records with passport numbers and 5,078 photo contest entries at risk (1) 2024-10-25 Betsudaikohsan: ransomware, with a threat to sell the data (4) 2024-10-24 Sanko Air Plant: ransomware; attackers abused a guest account over VPN (1) 2024-10-24 Slow Village: personal data of 32,345 customers, including card data of 4,494, may have leaked from its online shop (1) 2024-10-22 Burger King: unauthorized access to the official app leaked email addresses and passwords of 38 members (1) 2024-10-22 KidZania: unauthorized access to the website leaked personal data of 24,644 KidZania Tokyo bookers (1) 2024-10-21 MTI: ransomware through stolen credentials; staff and partner data may have leaked (1) 2024-10-18 Nexus-Shinozaki Transport & Logistics: file server accessed; partner contact names and quote and invoice data may have leaked (1) 2024-10-18 Yorozu: ransomware halts core systems and delays its earnings report (1) 2024-10-16 Saizeriya: ransomware exposes about 60,000 records of staff and business partners (1) 2024-10-10 GAME FREAK: unauthorized access to its server leaked names and work email addresses of 2,606 employees and contractors (1) 2024-10-10 Kanagawa Sewerage Public Corporation: BlackSuit ransomware on servers and PCs; personal data may have leaked (1) 2024-10-08 Casio: ransomware leaks employee, partner and customer personal data (1) 2024-10-08 CoCo Ichibanya: unauthorized access to the catering inquiry form; 172 applicants' data became viewable outside (1) 2024-10-07 Tokyo Sonpo Kantei: ransomware puts customer data of several insurers at risk (6) 2024-10-02 Kyocera Communication Systems: ransomware hits Ikaruga town library's new system just before launch through flawed access settings (2) 2024-10-01 Like Kids: ransomware; about 158,000 personal data records may have been viewed (6) 2024-09-27 J PREP: Saito Juku staff email account accessed (1) 2024-09-27 Nagoya University: researcher exchange site 100-nin RONBUN defaced; participant data may have leaked (1) 2024-09-26 Bell Data: ransomware; about 47,000 business card and employee records may have been viewed (1) 2024-09-26 Otsuka Toshimi Scholarship Foundation: unauthorized access to the scholars' page (1) 2024-09-26 Shinshu University: personal data leaked from the teacher-training course system (1) 2024-09-20 Hanwa: apparent ransomware attack on its Thai subsidiary; group file server also accessed (1) 2024-09-20 Ishimitsu: ransomware, starting with remote desktop access to a group company's SIM-equipped laptop (1) 2024-09-19 Kenbiya: database backup accessed; member and inquiry-user data may have been viewed (1) 2024-09-19 Sougyo Service: ransomware; customer data of clients such as Shochiku and Taiju Life may have leaked (4) 2024-09-17 PERSOL Career: a flaw in the doda system for ad sales agencies let agencies view data of 549,195 recruiters (1) 2024-09-15 ZACROS: ransomware; 38 staff records confirmed leaked and wider personal data at risk (1) 2024-09-13 Kantsu: ransomware stops Cloud Thomas and other warehouse systems, halting client shipments (4) 2024-09-06 Miyaki: ransomware halts production lines for two days (1) 2024-09-06 Sanyo Bussan: unauthorized access encrypted data on multiple servers, and customer, partner and staff personal data may have leaked (1) 2024-09-05 Fukui Denki: ransomware hits a file server; partner and employee data may have leaked (1) 2024-09-02 Marukan: ransomware encrypts some servers (1) 2024-09-02 Nissan Car Rental Solutions: unauthorized login to the "e-Share Mobi" car sharing system misused vehicles and may have exposed up to 69,859 records (1) 2024-08-30 Hiroike Gakuen: ransomware after an intrusion in March; student and parent data at risk (1) 2024-08-30 Moralogy Foundation: ransomware; supporter and partner data may have been viewed or taken (1) 2024-08-28 Edelweiss: card data at risk at its Wittamer and Antenor online shops (45,355 and 7,018 records) (1) 2024-08-28 Sanofi: unauthorized access to a database; data of 730,000 healthcare professionals may have leaked (1) 2024-08-27 Genkai Town: SQL injection attack on its hometown tax donation site leaked email addresses and other data of 413,867 people (1) 2024-08-26 Avenue: ransomware through a maintenance contractor's settings error; tenant data at risk (1) 2024-08-26 KISCO: ransomware, starting from a firewall used for overseas remote access (1) 2024-08-26 LY Corp: credential stuffing on LINE Business IDs hijacked 688 official accounts, exposing friends' chats and other data (1) 2024-08-23 J-Will Partners: unauthorized access to an employee's email account; personal data of 7,132 people may have leaked (1) 2024-08-23 Kowa: ransomware encrypts business data and software (1) 2024-08-20 Makuake: a 48-minute login defect swapped sessions with other users' accounts, affecting 3,916 accounts (1) 2024-08-16 Nichii: ransomware on group PCs encrypts about 26,000 files; no trace of a leak (2) 2024-08-15 Tokio Marine & Nichido: an employee seconded to agency FP Partner leaked about 35,000 customer contracts of other insurers to the company (2) 2024-08-13 ITOCHU Techno-Solutions: a contractor was hit by ransomware and its file sharing service was accessed (1) 2024-08-09 e431: ransomware hits an internal server; pre-2021 online shop customer data may have leaked (1) 2024-08-08 Money Forward: Cloud Invoice accounts were hijacked or newly created and abused to send mass suspicious emails (1) 2024-08-08 Seiko Epson: unauthorized access to servers of three group companies, with no data leak confirmed (1) 2024-08-07 Tokyu Livable: a former employee took a list of 25,406 condominium owners in Minato-ku and used it for direct mail (1) 2024-08-05 LY Corp: a defect in Yahoo! JAPAN ID SMS login may have let third parties read Yahoo! Mail (1) 2024-08-05 Mitsubishi Electric Home Appliance: intrusion also reached a server holding data of about 2.31 million customers (1) 2024-07-31 Tokyo Tamago Honpo: card data (65,387 records) and personal data (73,961 records) may have leaked from its Tokyo Tamago Gomatamago online shop (1) 2024-07-29 Sharp: unauthorized access to COCORO STORE and Healsio Deli leaked data of 5,836 customers, with card data of 4,257 possibly leaked (1) 2024-07-19 Matec: Akira ransomware, likely through a UTM flaw and a misused VPN account (1) 2024-07-18 Murayama: ransomware encrypts a business data server (1) 2024-07-18 Shimogamo Saryo: card data of 16,682 and personal data of 19,235 customers may have leaked from its online shop (1) 2024-07-17 Tokyo Gas Engineering Solutions: intrusion may have exposed personal data of about 4.16 million people (5) 2024-07-16 Higashihara Shoten: unauthorized access to the Olive beef Higashihara shop; personal data of 27,561 customers, including 1,703 cards, may have leaked (1) 2024-07-16 Recruit: unauthorized access to a trial SUUMO server, and 1,313 staff names in Roman letters leaked (1) 2024-07-12 Aika: ransomware hits its servers; leak judged very unlikely (1) 2024-07-12 Shibayama Consultant: ransomware; personal data from Aichi and Gifu public works may have leaked (4) 2024-07-12 Total Insurance Service: a seconded Sompo Japan employee leaked customer contract data to Sompo Japan (1) 2024-07-09 QST: ransomware on QST Hospital's clinical research systems, caused by an unpatched network device and shared passwords (1) 2024-07-05 UNITEC Foods: intrusion; about 78 GB of data sent out (1) 2024-07-04 NISHIO HOLDINGS: group systems were encrypted by LockBit ransomware, with no confirmed data exfiltration (2) 2024-07-02 HAGS: unauthorized access to hags-ec.com; card data of 1,432 customers and member data may have leaked (1) 2024-07-01 Taiyo Kogyo: a cyber attack damaged part of its information systems, and information may have leaked (1) 2024-06-28 PAL GROUP: unauthorized access to multiple servers, and staff names and salary bank accounts may have leaked (1) 2024-06-26 Hokkaido Sanchi Chokuso Center: card data of 18,443 and personal data of 54,583 customers may have leaked from its online shop (1) 2024-06-26 Sophia University: a file with data on all 13,949 regular students was emailed by mistake to three overseas partner schools (1) 2024-06-25 Brave group: responses to several VTuber audition forms left accessible (1) 2024-06-25 Komaihaltec: ransomware after an unauthorized remote desktop logon (1) 2024-06-21 BELLSYSTEM24: unauthorized access to its Vietnamese subsidiary's servers, and client companies' customer data may have leaked (1) 2024-06-20 Hoshi: ransomware; retail customer data may have leaked (1) 2024-06-18 Shirasaki: ransomware; Otsuka Corporation's customer data may also have leaked (2) 2024-06-18 Academia Music: its online shop's payment application was tampered with, and card data of 4,324 customers may have leaked (1) 2024-06-18 Morinaga: unauthorized access to its servers, and 4,882 records of staff and others may have leaked (1) 2024-06-17 Alpha-uni: unauthorized access to its official shop; card data of 1,054 customers and personal data of 3,126 members may have leaked (1) 2024-06-17 HinaProject: DDoS attack on "Shosetsuka ni Naro", causing connection failures and emergency maintenance (1) 2024-06-11 BANDAI SPIRITS: a contractor discarded a personal hard disk with data on it, and "Premium Bandai" member data may have leaked (1) 2024-06-10 Nidec Instruments: ransomware; partner, customer and employee personal data at risk (2) 2024-06-10 Oiles: ransomware; attackers exploited a VPN vulnerability in the group (1) 2024-06-10 Takano Sogo Accounting: ransomware puts client data of Tokio Marine group firms and others at risk (5) 2024-06-09 KADOKAWA: ransomware attack on Niconico and other group services (2) 2024-06-06 Shinnihonseiyaku: ransomware encrypts some business data (1) 2024-06-05 Hirokei: ransomware puts clients' medical data at risk (8) 2024-06-05 Karel Capek: personal data of 103,289 members and 58,407 card records may have leaked from its online store (1) 2024-06-05 Kyuhen: ransomware may have exposed about 374,000 personal records (2) 2024-06-04 WORKPORT: unauthorized access to the server of its job-change support site, and member data was posted on an overseas site (1) 2024-06-03 Tozai Tetsugaku Shoin: card data (18,394 records) and personal data of 50,338 customers may have leaked from the Hakubun Eikodo online shop (1) 2024-05-31 Aizawa Asset Management: an employee's cloud email was breached and about two years of mail taken, leaking data of 2,540 people (1) 2024-05-31 DMM Bitcoin: 4,502.9 BTC (about ¥48.2 billion) stolen via contractor Ginco; police attribute it to North Korea-linked TraderTraitor (2) 2024-05-30 Tully's: intrusion at its online store; payment app tampering may have leaked over 50,000 cards (1) 2024-05-29 Iseto: ransomware leaks data of about 3.07 million people from about 100 client organizations (13) 2024-05-27 Gantan Beauty Industry: unauthorized access to its servers, and data of staff, partner firms and customers may have leaked (1) 2024-05-24 Nagasaki Prefecture Products Promotion Association: card data of 18,746 customers leaked from its e-Nagasaki.com shop (1) 2024-05-24 NEXTLEVEL: worker database accessed without authorization through an admin screen, and 496,119 personal data records leaked (1) 2024-05-24 Sekisui House: SQL injection on a member site leaks email addresses and passwords (1) 2024-05-22 Shinzone: internal portal exposed by a cloud misconfiguration, making data of about 42,400 customers viewable (1) 2024-05-21 Okayama Psychiatric Medical Center: ransomware leaks data of up to about 40,000 patients (1) 2024-05-20 INTENSE: unauthorized access to its "fofo" online shop, and 15,198 card records leaked (1) 2024-05-20 MIXI: unauthorized logins to "mixi", and members' names and birth dates may have leaked (1) 2024-05-17 Hanshin Tigers: email addresses of "Toratere" prize campaign entrants were left viewable (1) 2024-05-17 JF Zengyoren: Gyogyoichi online shop breached; 11,844 card records may have leaked (1) 2024-05-16 Joyful Honda: card data (3,958 records) and personal data of 20,132 customers may have leaked from its THE GLOBE·OLD FRIEND shop (1) 2024-05-16 Tomoe Shokai: ransomware via RDP; employee and other personal data at risk (2) 2024-05-14 Kishiwada Sports: card data of 13,960 and personal data of 38,664 KISHISPO customers may have leaked (1) 2024-05-13 Biophilia: unauthorized access to its cloud server; data of about 200,000 accounts taken (1) 2024-05-13 Matsui Shuzo: malicious files planted on its online store; card data of 174 customers may have leaked (1) 2024-05-09 Tokyu: unauthorized access to its network, and data on subsidiary Toko Shokuhin's file server was read (2) 2024-05-02 Toyoshima: ransomware; attackers got in with obtained IDs and passwords (1) 2024-04-30 Miyazaki Denshi Kiki: ransomware halts its invoicing system (1) 2024-04-26 Meira: ransomware; attackers got in with a group company's administrator account (1) 2024-04-24 SEGA FAVE: email accounts accessed; partner, staff and customer data may have leaked (1) 2024-04-24 Wantedly: access setting errors exposed data of 200,578 users on unpublished pages (1) 2024-04-23 Endless: LockBit enters through a test account the installer left behind (1) 2024-04-22 Nagomi: unauthorized access to its online shop, and 16,407 card records leaked (1) 2024-04-19 Otsuka: email sent to the wrong address leaked names of 2,687 customers (1) 2024-04-05 Toshiba Tec: unauthorized access to a cloud service it uses, and personal data of partners and staff may have been viewed (1) 2024-04-02 Marukawamiso: card data (5,447 records) and personal data of 89,673 customers may have leaked from its official shop (1) 2024-04-01 HOYA: ransomware halts production and leaks personal data (1) 2024-03-29 Workstyle Tech: WelcomeHR server misconfiguration left ID images and other data of 162,830 people open (1) 2024-03-26 CRESS TECH: ransomware, likely through a misconfigured UTM device (1) 2024-03-26 TMT Machinery: ransomware encrypted its business systems, and some data may have leaked (1) 2024-03-22 Japan Business Data Center: ransomware on the small business subsidy office server destroys and encrypts some data (2) 2024-03-21 Yaizu City: its deep sea water facility contractor fell for a tech support scam, and data of about 15,000 people may have leaked (1) 2024-03-15 Fujitsu: malware on 49 work PCs may have exfiltrated personal and customer data (1) 2024-03-15 Hokushu: unauthorized access to its servers, and files with transaction data containing personal data may have been opened (1) 2024-03-14 Golf Digest Online: unauthorized access to some internal servers, with no customer data leak confirmed (1) 2024-03-13 FueTrek: ransomware; server data may have leaked (1) 2024-03-13 TeNY: cyberattack encrypts internal PCs and servers; broadcasting not affected (1) 2024-03-08 Aichi Rikuun: ransomware encrypts server data (1) 2024-03-07 MLIT Kinki Regional Development Bureau: unauthorized traffic at the Yodogawa Park reservation system "Yodoiko!", and registered users' data may have leaked (1) 2024-03-04 Kanko Gakuseifuku: card data of 3,894 customers may have leaked from its online shop (1) 2024-03-04 Kokubu Seikyo Hospital: ransomware on its image server limits emergency and outpatient care (1) 2024-03-01 Hokkaido University: unauthorized access to the Faculty of Engineering web server, and 23,554 personal records may have leaked (1) 2024-02-28 Nakahora Farm: former shop compromised; 5,069 card records and personal data of 14,933 customers at risk (1) 2024-02-22 Izumi: ransomware; data of up to about 7.78 million Youme Card members may have been viewed (1) 2024-02-20 CREATEs: personal data of 65,520 customers and some card data may have leaked from its former shop (1) 2024-02-19 Kagoshima Kumiai Foods: unauthorized access to its mail-order site "Kumishoku Farm", with 2,114 cards and data of 22,234 people possibly leaked (1) 2024-02-16 Daikin Industries: a third-tier subcontractor worker downloaded about 22,000 supplier contact records (1) 2024-02-16 Toyota Mobility Service: unauthorized access to the data server of its company car cloud "Booking Car", and about 25,000 people may be affected (1) 2024-02-14 LY Corporation: contractor accounts misused; 57,611 staff-related records may have leaked (1) 2024-02-09 Sumitomo Heavy Industries: unauthorized access to group servers, with the full damage under investigation (1) 2024-02-07 Yamada Manufacturing: ransomware encrypts some servers (1) 2024-02-06 Tokyo Verdy: card data of 2,726 customers may have leaked from its official online store (1) 2024-02-05 Hokuyaku Takeyama Holdings: ransomware via remote desktop with a domain admin ID (1) 2024-02-01 DyDo: intrusion into the group network; vending machine locations and partner data may have leaked (1) 2024-01-31 Fine Aid: unauthorized access to its mail-order site "Kenko Ikiiki Lifestyle", and card data of 5,193 people may have leaked (1) 2024-01-31 Saitama Health Promotion Foundation: ransomware on its X-ray reading system puts checkup images at risk (3) 2024-01-26 Cocolonet: intrusion into its servers; malware had been running for two months (1) 2024-01-26 Ofuji: ransomware through a VPN device; up to about 200,000 customer records at risk (1) 2024-01-19 Ise Shoyu Honpo: card data of 2,727 and personal data of 9,034 customers may have leaked from its online shop (1) 2024-01-19 Nitto Seimo: ransomware encrypts business data (1) 2024-01-15 Kumagai Gumi: unauthorized access to its servers, and what leaked is under investigation (1) 2024-01-12 Chubb Insurance Japan: a setting error in its agency system let agencies without permission view other insurers' contract data (1) 2024-01-10 Soken Chemical: ransomware; partner and employee personal data may have leaked (2) 2024-01-09 agnès b. Japan: ransomware; some business data leaked (1) 2024-01-09 NITS: unauthorized access to its email system through a device vulnerability, and email content may have leaked (1) 2023-12-22 Nagano Nippo: ransomware infected its servers, and it printed reduced-page newspapers (1) 2023-12-21 Kinokuniya: unauthorized access to magazine delivery sites, and data of up to 9,881 people may have leaked (2) 2023-12-11 Diamond, Inc.: ransomware hit its servers, and it warned of suspicious emails (1) 2023-12-07 Ateam: Google Drive sharing mistakes left the personal data of 935,779 people viewable (1) 2023-12-06 Restar: ransomware hit its group servers, affecting shipping and customer support (1) 2023-11-29 JAXA: data leakage from its 2023 intrusion confirmed in a July 2024 follow-up (1) 2023-11-28 Sekisui House: a setting flaw on contractor BIPROGY's cloud development server leaked customer data and put many more at risk (2) 2023-11-27 LY Corporation: contractor PC malware led to access to former LINE systems, and up to about 520,000 records leaked (1) 2023-11-22 J:COM: the access log server of a mobile app of its mesh Wi-Fi provider's partner was breached and personal data of about 230,000 customers leaked (1) 2023-11-21 Nakatsu Municipal Hospital: its accounting system was infected with ransomware and data on 154 vendors may have leaked (1) 2023-11-17 JSPS: unauthorized access to its file transfer service "Proself" leaked personal data of 1,272 researchers, event participants and staff (1) 2023-11-09 Inageya: the QR code on its net supermarket sign-up posters led to a fraudulent site and card data of some customers was stolen (1) 2023-11-06 Japan Aviation Electronics: unauthorized access to some group servers, with system stops and email delays (1) 2023-11-02 Kinsho Store: ransomware hit servers at its data center and personal data of about 36,000 people, including net supermarket members, may have leaked (1) 2023-11-02 Kyodo News: unauthorized access to server equipment may have leaked personal data of 4,313 staff and others (1) 2023-11-01 IDEC: unauthorized access to its network, and servers that might be affected were halted (1) 2023-10-31 Baccarat Pacific: unauthorized access to its servers may have leaked about 300,000 customer records in Japan, and part was published online (1) 2023-10-30 BIGMOTOR: unauthorized access to its website, and personal data of about seven years of inquiry form users may have leaked (1) 2023-10-30 NIES: its file transfer service "Proself" was hit by a zero-day attack and data including personal data may have leaked (1) 2023-10-27 Right-on: ransomware hit its servers, and a leak of personal data cannot be ruled out (1) 2023-10-23 Suishow: a cloud setting flaw in its location SNS "NauNau" left location data and more viewable (1) 2023-10-18 Casio: a development-environment database of its education app "ClassPad.net" was accessed from outside and customer data in Japan and abroad leaked (1) 2023-10-17 NTT Marketing Act ProCX: a former dispatched worker on its call-center system took about 9 million customer records (2) 2023-10-13 Ricoh: an XXE vulnerability in its cloud storage "RICOH Drive" was exploited and 3,798 login IDs leaked (1) 2023-10-04 ETC Usage Inquiry Service: mass access from overseas IP addresses, and some accounts were logged in without authorization (6) 2023-09-29 ECC: unauthorized access to the development server of its learning support system "Intersection" may have leaked data of 1,249 students (2) 2023-09-27 FUJISOFT: unauthorized access to its internal systems, some internal information may have leaked (1) 2023-09-26 NHK: unauthorized access to business servers at its Broadcasting Center may have leaked account data of 23,435 staff and others (1) 2023-09-25 SB C&S: unauthorized access to its business e-commerce site "Mobile Solution Market" and the site was down for about six weeks (1) 2023-09-15 Mazda: unauthorized access to server equipment may have leaked 104,732 account records of staff and partner contacts (1) 2023-09-12 Alps Alpine: ransomware hit group servers and halted production and shipping in Japan and abroad (1) 2023-09-06 Asahi Shimbun: names and addresses of 884 members of Asahi Shimbun Digital and the paper viewer leaked, found through an outside tip (1) 2023-09-04 Kochi University of Technology: an attacker entered several university servers via a research server and collected staff email addresses and more (1) 2023-08-29 Bristol-Myers Squibb K.K.: a flaw in "MOVEit" was exploited and data of healthcare professionals and former staff may have leaked (1) 2023-08-23 SPRIX: ransomware encrypted some servers of its subsidiary Shonan Seminar (2) 2023-08-23 Zeon: unauthorized access to server equipment may have leaked 13,434 personal data records of customers, partners and staff (1) 2023-08-17 Kurashiki Hanpu: unauthorized access to its online store may have leaked 40,869 personal data records, including 8,655 card records (1) 2023-08-15 Visionary Holdings: customer data of up to 1,832 people of Megane Super may have been improperly obtained at stores that took over its former outlets (1) 2023-08-10 Seiko Group: ransomware hit its servers and about 60,000 pieces of personal data of group companies leaked (3) 2023-08-07 The Body Shop Japan: ransomware hit its systems and suspended point granting and other services (1) 2023-08-04 National Cybersecurity Center: a flaw in a mail system device was exploited and mail data containing personal information may have leaked (1) 2023-08-04 Japan Meteorological Agency: unauthorized communication to mail devices may have leaked part of the mail data it received (1) 2023-08-03 Nulab: unauthorized access to the Typetalk log monitoring system may have leaked logs with email addresses and tokens (1) 2023-07-31 Saito: unauthorized access to the "Saito Ham Official Online Store" may have leaked 4,034 card records (1) 2023-07-28 JACCS: ransomware hit its servers and encrypted data of its electronic form service (1) 2023-07-28 Fukuoka Tokushukai Hospital: unauthorized access left personal data of patients and others viewable from outside (1) 2023-07-21 Sky Perfect JSAT: an attacker impersonating a subsidiary employee logged in to internal servers, and personal data of 1,451 partner contacts and staff may have leaked (1) 2023-07-14 Alps Alpine: unauthorized access to group company servers leaked names and email addresses of about 16,000 employees (1) 2023-07-14 Daicel: ransomware hit servers of its Thai subsidiary (1) 2023-07-10 FIT: the payment application of "FA Kiki.com" was tampered with, and card data of 5,877 customers and personal data of up to 26,394 may have leaked (1) 2023-07-07 Nankai Electric Railway: the website of its shared office "Lieffice" was altered through unauthorized access; no customer data leaked (1) 2023-07-05 Glory: servers managed by the group were accessed without authorization and some information leaked (1) 2023-07-05 Nagoya Port Transportation Association: ransomware hit the Nagoya United Terminal System and stopped all container terminals in the port (1) 2023-06-30 WOWOW: an authentication error at login to "WOWOW On Demand" let users see other customers' contract and viewing data, affecting up to 44,144 people (1) 2023-06-29 Central Information Systems: ransomware encrypted its servers and part of the personal and company information it holds leaked (1) 2023-06-22 Shibushi City: unauthorized access to its hometown tax donation site may have leaked 910 card records and personal data of 2,280 donors (1) 2023-06-16 Yamaha: its US sales subsidiary was hit by a ransomware attack and information on local business partners may have leaked (1) 2023-06-15 Nikkei: a file with personal data of 3,763 webinar registrants was viewable on the internet for two weeks (1) 2023-06-12 Uji Hospital: ransomware encrypted some data and logs of data sent outside mean a leak cannot be ruled out (1) 2023-06-10 Toyota Boshoku: a vulnerability in the data exchange system of its European subsidiary was exploited and some data was stolen (1) 2023-06-08 KOKUYO: some of the group's information systems were hit by a ransomware attack (2) 2023-06-07 Suginami Ward: the server of the social welfare corporation Fukuinryo, which runs its after-school clubs, was infected with ransomware and all data was encrypted (2) 2023-06-06 Dentsu Soken (then Information Services International-Dentsu): a remote access device was attacked and 13,706 records may have leaked from its account management system (1) 2023-06-06 Eisai: several group servers were encrypted by ransomware and it disconnected systems including logistics (1) 2023-06-06 MK SYSTEM: servers in its data center were encrypted by ransomware and services such as "Sharomu" for labor consultants stopped for about 3,400 users (4) 2023-06-06 Yamato Holdings: a server of its Hong Kong subsidiary was accessed without authorization (1) 2023-05-31 Avant Group: its subsidiary Internet Disclosure was accessed without authorization and stopped services such as "Kaiji Net" and "Soumu Net" (2) 2023-05-19 Eisai: an overseas employee account was misused and information on business partner contacts on the group cloud platform may have leaked (1) 2023-05-17 Kadoya: the "Kadoya Official Online Shop" was accessed without authorization and card data of up to 6,263 customers may have leaked (1) 2023-05-15 Otsuchi Town: the water and sewer accounting system may have been infected with a virus and personal data of 566 people may have leaked (1) 2023-05-12 Toyota Motor: a cloud misconfiguration at its contractor Toyota Connected left vehicle data of about 2.15 million customers viewable from outside (2) 2023-05-11 Mie Prefectural General Medical Center: its website was written to without authorization and external link URLs appeared on six pages (1) 2023-05-09 Nippon Concrete Industries: its servers were infected with ransomware and business data and business software were encrypted (1) 2023-04-28 SIIX: some of its internal servers were accessed through ransomware (1) 2023-04-27 Murata Manufacturing: its network was accessed without authorization and some data on a file server may have been read (1) 2023-04-26 Mynavi: personal data of 1,210 TECH+ seminar registrants was viewable by third parties through search engines for about three years (1) 2023-04-26 NAGASE: servers used by its three Chinese subsidiaries were accessed without authorization (1) 2023-04-25 OHASHI TECHNICA: an overseas subsidiary transferred funds on false instructions from a malicious third party, with an expected loss of about 280 million yen (1) 2023-04-25 Shogakukan: a director's company phone was accessed after a fake courier SMS and 302 personal data records may have leaked (1) 2023-04-14 OSG: its servers were hit by a ransomware intrusion, internal systems stopped and orders and shipments were slightly affected (1) 2023-04-13 Future-In: the CMS servers behind council broadcast services were accessed without authorization and the council web services of about 90 municipalities were stopped (1) 2023-04-12 ROIS (Institute of Statistical Mathematics): an SQL injection attack hit the server of its joint research database and 5,527 email addresses may have leaked (1) 2023-04-11 Sengoku Densho: SQL injection into its online shop "Sengoku Net Tsuhan" leaked email addresses of buyers and users (1) 2023-04-03 IDOM: its servers were accessed without authorization and the damage spread across a wide part of the network (1) 2023-04-03 Niigata University of Health and Welfare: a CMS vulnerability was exploited and its website was tampered with, redirecting visitors to a malicious site (1) 2023-03-31 NTT Docomo: customer data of up to about 5.29 million records may have leaked from a PC of a company it outsources "plala" and "Hikari TV" work to (1) 2023-03-30 en: a credential stuffing attack hit "en tenshoku" and the web résumés of 255,765 users may have been accessed (1) 2023-03-27 Sumitomo Realty: a misconfiguration in the cloud system of "Sumitomo Fudosan no Fureai+S" left 3,378 personal records viewable by third parties (1) 2023-03-24 Demae-Can: a flaw in third-party account linkage may have shown account data of other customers on a shared device, with the count revised to 9.24 million accounts (1) 2023-03-23 Babyland Tama Baby: the "EC site Babyland" was accessed without authorization and card data of 5,246 customers leaked (1) 2023-03-16 Furukawa Battery: a PC of an employee at its Imaichi works was infected with Emotet and personal data may have leaked (1) 2023-03-13 I-Koumuten: a former employee took customer data out improperly and gave it to the new employer (1) 2023-03-09 Ishinomaki Area Wide Administration Union: a server on its internal network was infected with ransomware and part of its work was disrupted (1) 2023-03-07 Audio-Technica: the system failure since February 25 was traced to a ransomware intrusion and internal confidential information may have been viewed (1) 2023-03-03 Rokkasho Genen Kikaku: a PC holding visitors' personal data was accessed without authorization and data of 4,982 people may have leaked (3) 2023-03-02 Platinum Style: "PARTY DRESS STYLE" was accessed without authorization and card data of 8,604 customers may have leaked (1) 2023-02-28 TOHO Chemical Industry: servers in its data center were accessed without authorization and the core and related systems were also damaged (1) 2023-02-28 TOMATO: the "Tomato Online Shop" was accessed without authorization and card data of 14,256 customers may have leaked (1) 2023-02-27 Muroran Institute of Technology: staff PCs were accessed without authorization, the mail server was used to send spam, and personal data of 553 people may have been viewed (1) 2023-02-27 ROUND ONE: its server was accessed without authorization and the store fee page was tampered with, redirecting visitors to inappropriate web pages (1) 2023-02-24 Teikoku Databank: its network was accessed without authorization and some products could not be provided (1) 2023-02-21 Wood Friends: malicious programs were placed on its corporate site and others, and entered personal data may have leaked (1) 2023-02-20 Sankyo Shokai: the "Sankyo Shokai official shop" was accessed without authorization and card data of 8,794 customers leaked (1) 2023-02-15 Aica Kogyo: servers of its subsidiary in Thailand were attacked with ransomware, with no effect on operations (1) 2023-02-15 Sojitz Infinity: the "TOMS Official Store" was accessed without authorization and 3,840 card records leaked (1) 2023-02-14 Nipro: a server of its subsidiary in China was attacked with ransomware (1) 2023-02-14 SOURCENEXT: the payment application of its online shop was tampered with and card data of 112,132 customers leaked (1) 2023-02-09 Meiji University: a server of the education and research system at the Ikuta campus was accessed without authorization and 36,692 email addresses may have been stolen (1) 2023-02-09 Saitama University: a settings flaw let outsiders reach its NAS devices, and ransomware altered part of the data (1) 2023-01-31 Fujikura: servers of its subsidiary in Thailand were accessed without authorization and infected with malware, affecting production and shipping (1) 2023-01-30 Tokyo Kikai Seisakusho: servers of a consolidated subsidiary were attacked with LockBit 2.0 and customers' personal data may have leaked (1) 2023-01-25 JSB: an employee took about 29,000 customer records from the customer management system and leaked them to third parties (1) 2023-01-23 Takamiya: attackers got into internal servers through its Vietnam base and infected them with LockBit, and customer data and the data of all group employees may have leaked (1) 2023-01-20 Japan Organ Transplant Network: its mail service was attacked from overseas and part of the mail data of the inquiry address was lost (1) 2023-01-19 Adastria: servers of its internal business systems were accessed without authorization and up to 1,044,175 personal records may have leaked (1) 2023-01-18 FM TOKYO: the order management screen of the e-commerce platform behind the "TOKYO FM official shopping site" was accessed without authorization, and customers may have received fake re-payment emails (1) 2023-01-12 SHIGETA: the pre-renewal "SHIGETA PARIS official online store" was accessed without authorization and card data of 7,024 customers may have leaked (1) 2023-01-11 IIBC: the "TOEIC application site" was logged into with IDs and passwords from other services, and some members' data may have been viewed (1) 2023-01-10 Aflac Life: a contractor's video delivery server was accessed without authorization and data of 1,323,468 cancer insurance holders leaked (1) 2023-01-10 Zurich Insurance Japan: a contractor set up a server without proper security and data of 692,428 auto insurance customers was posted on the dark web (1) 2023-01-06 Goodspeed: some of its servers were accessed without authorization. The damage is limited to some servers and no data leak has been confirmed (1) 2023-01-04 Nosh: a sub PC holding customer data was encrypted by ransomware, and 6,184 customer records may have leaked (1) 2022-12-26 Tsuno Food Industrial: the "Tsuno Food web shop" was accessed without authorization and 2,086 card records leaked (1) 2022-12-23 Fujitsu: unauthorized communication hit network devices of its FENICS service, and some emails on the TKC mail service may have been viewed from outside (11) 2022-12-23 Nikkei: the server of "Nikkei Smart Clip" was accessed without authorization and the email addresses and other data of 266 users of customer companies may have leaked (1) 2022-12-21 Stylish H&A: three sites including "COLORFUL CANDY STYLE" were accessed without authorization and card data of up to about 17,500 customers may have leaked (1) 2022-12-21 Sumitomo Bakelite: its US group companies were hit by a cyberattack. The effect is limited to some US group companies (1) 2022-12-13 Cinque Classico: "Cinq essentiel" was accessed without authorization and card data and member data of 873 customers may have leaked (1) 2022-12-12 KAGA ELECTRONICS: servers of its Thai subsidiary were hit by an apparent ransomware attack and it stopped the servers and PCs (1) 2022-11-30 SEED: the network server of its Konosu research center was accessed without authorization and up to about 70,700 personal data records may have leaked (1) 2022-11-30 Vantan: a server for its sites was accessed without authorization and it stopped the server and suspended the sites. Personal data may be affected (1) 2022-11-28 GENTOS: the "GENTOS official store" was accessed without authorization and 5,471 card records and personal data of up to 5,521 people may have leaked (1) 2022-11-21 Wacom: the old system of the "Wacom Store" was accessed without authorization, and 1,938 card records and personal data of up to 147,545 people may have leaked (1) 2022-11-18 Tokai National Higher Education and Research System: its account management server was hit by a password brute-force attack and ransomware, and about 40,000 personal records may have leaked (1) 2022-11-17 AkaraN: the "akaran official online store" was accessed without authorization and card data of 8,483 customers may have leaked (1) 2022-11-10 UUUM: an administrator authentication key for GitHub was readable on a web server, leaving all source code and personal data obtainable (1) 2022-11-09 Japan Cable Television (now JCTV): its file server and work PCs were accessed without authorization, and data on about 7,000 people became unusable (1) 2022-11-08 Tokyo Kiraboshi FG: the cloud file system used by its Shanghai group company was accessed without authorization and its data became unreadable (1) 2022-11-02 Fujitsu General (now GENERAL): a group-managed server was accessed without authorization and it stopped the server and cut the network (1) 2022-11-01 Tokyo Chemical Industry: its US subsidiary was accessed without authorization, and business-partner data held by the group, including in Japan, may have leaked (1) 2022-10-31 Osaka General Medical Center: an apparent ransomware attack disabled its electronic medical records and stopped normal care (1) 2022-10-25 JTB: it misconfigured access rights on a cloud service for a Japan Tourism Agency subsidy project, and personal data of up to 11,483 people was seen by other businesses (1) 2022-10-25 Showcase: the code of its form-input services was rewritten, and card data entered on customer sites may have leaked (9) 2022-10-18 Hirata Gakuen: a server of Osaka Aviation College was accessed without authorization, apparently by ransomware (1) 2022-10-13 Nara Co-op: ransomware stopped its core systems and it suspended home deliveries for a long time (1) 2022-10-07 Nippon Konpo Unyu Soko (now NIKKON Logistics): two servers were accessed without authorization and some files were encrypted (1) 2022-10-07 Toyota Motor: T-Connect source code was left public, and 296,019 email addresses and other data may have leaked (1) 2022-09-26 Digital Agency: the mail relay server of "gBizID" was accessed without authorization and about 13,000 spam emails were sent (1) 2022-09-26 Landmark: its business uniform online shop "Uniform Town" was accessed without authorization and card data of 63,565 customers may have leaked (1) 2022-09-26 Sanyo SC Development: servers on the cloud and PCs were accessed without authorization, and a leak of about 7,950 personal records cannot be ruled out (1) 2022-09-24 Ghibli Park: names and addresses of 1,525 staff applicants were stolen from a contractor's recruitment system, and the contractor was asked for money (1) 2022-09-22 UPDATER (Minna Denryoku): its file server was infected with ransomware and information on customers and others may have leaked (1) 2022-09-20 Nihonsakari: its server was accessed without authorization, internal systems failed, its ordering system became unusable and the online shop was closed (1) 2022-09-20 Nitori Holdings: a credential stuffing attack hit the "Nitori App", and member data in about 132,000 accounts may have been viewed (1) 2022-09-16 Nippon Cultural Broadcasting Career Partners: the server of its Tokyo office was accessed without authorization, apparently by ransomware, and it cut the network (1) 2022-09-16 Bushu Pharmaceuticals: a VPN device vulnerability led to unauthorized access found through an extortion email, and about 13,000 personal records have probably leaked (1) 2022-09-16 Sekaido: the server of the contractor managing its online shop was accessed without authorization, and up to 186,704 member email addresses leaked (1) 2022-09-14 DYNAM JAPAN HOLDINGS: its servers were hit by ransomware, part of the data was encrypted and internal systems failed (1) 2022-09-13 NITTAN: its servers were accessed without authorization, apparently by ransomware, and it cut the network and expects recovery to take time (1) 2022-09-05 Furuhashi EPO: the servers in its data center were accessed without authorization, its core systems were damaged and some operations were affected (1) 2022-09-01 Meiji: its Singapore subsidiary was infected with ransomware and LockBit 3.0 demanded $100,000, with no effect on Meiji's business (1) 2022-08-23 SOMPO Holdings: its Taiwan group company was hit by a cyberattack, and its network was cut and systems stopped (1) 2022-08-18 Vector Park: its branded used-clothing online shop was accessed without authorization and card data of 18,136 customers may have leaked, found through a police notice (1) 2022-08-17 Nippon Chemi-Con: its server was accessed without authorization, with no tampering, no downtime and no effect on business (1) 2022-08-15 MHLW: data on designated intractable disease patients provided for research included forms with names and birth dates of 5,640 people (2) 2022-08-13 Hard Off: unauthorized logins hit its official app, member data may have been viewed in 6,186 logins, and the service was stopped temporarily (1) 2022-08-10 TOKAI Corporation: its server was accessed from outside without authorization, and it cut external communication and is investigating (1) 2022-08-05 Sumiwa Koun: its server was infected with ransomware and the data was encrypted and unusable (1) 2022-08-04 Idemitsu Credit: an outside service used on its card application screen was tampered with, and card data entered there may have leaked (1) 2022-08-02 WDB Holdings: a ransomware attack cut the group off its mail system and file server, and it suspended its internal network (1) 2022-08-01 Daito: "DIY FACTORY Business" was accessed without authorization and users were led to a fake card entry page, leaking card data (1) 2022-08-01 Sanwa Soko: unauthorized access stopped its logistics system, halting stock handling and invoicing, and some stored data may have leaked (1) 2022-08-01 Tokyo Metropolitan Government: the mail-sending service of its condominium management reporting system was abused to send 2,044 spam emails (1) 2022-07-29 Saitama University: one teacher's account on an external mail server was accessed without authorization, and 128 received emails and personal data of 67 people may have been viewed (1) 2022-07-21 CROSS PLUS: a server in its data center was accessed without authorization, its core systems were damaged and online sales and deliveries to business partners were affected (1) 2022-07-19 Minamiboso City: the school affairs network of its elementary and junior high schools was infected with ransomware, and it cut the network and school work stopped (1) 2022-07-19 Riken: its servers were hit by an attack that looked like ransomware, the network was cut off and ordering was disrupted (1) 2022-07-15 Cleantex Japan: data on its servers was encrypted and the order details of up to 40,600 own-store and shopping-mall orders may have leaked, also reaching customers of its business partners Senshukai and Otsuka (3) 2022-07-15 Kobori Shuzoten: its sales management server was accessed without authorization and stopped, and a leak of personal data cannot be ruled out (1) 2022-07-13 Bandai Namco Holdings: several group companies in Asia outside Japan were accessed without authorization and customer data of the toy and hobby business may be included (1) 2022-07-13 Harmonick: its catalog gift online shop was accessed without authorization, card data of up to 28,700 customers and personal data of up to 150,236 may have leaked, and the announcement came about five months after it noticed (1) 2022-07-12 SUNDRUG: its online store "SUNDRUG e-shop" and a customer site were hit by a credential stuffing attack, 19,057 member accounts were logged in without authorization and member data may have been viewed (1) 2022-07-08 infinite: its "infinite WEB SHOP" was accessed without authorization and its payment application was tampered with, card data of up to 2,083 customers may have leaked, and the site was closed (1) 2022-07-07 Kamei Proact: the old "PATRICK Online Shop" was accessed without authorization and card data of 5,172 customers may have leaked, with no effect on the new site (1) 2022-07-05 Nagoya Chamber of Commerce and Industry: some of its system servers were infected by a virus and accessed without authorization, a targeted virus that destroys and encrypts data (1) 2022-07-04 Kinko's Japan: unauthorized access to its server may have lost or leaked order details such as business cards and New Year cards, and the access came from a partner company's PC (1) 2022-07-04 Yomiuri Shimbun Online: about 30,000 logins hit its member system, personal data of up to 7,441 people may have been viewed, and passwords were invalidated (1) 2022-06-29 Disc Union: personal data of up to about 700,000 registrants of its online shops "diskunion.net" and "audiounion.jp" may have leaked, and the shops were stopped (1) 2022-06-28 Nagoya University: its information systems Q&A system was hit by blind SQL injection, and 2,086 email addresses of people who asked questions may have leaked (1) 2022-06-24 LITALICO: ransomware encrypted part of its internal data; no leak of customer personal data was confirmed (1) 2022-06-24 Nikkei BP: member accounts of "Nikkei Medical Online" were accessed without authorization and e-gift codes were read (1) 2022-06-24 View Card: unauthorized logins hit its member service "VIEW's NET", member data in 560 accounts may have been seen, and four services were stopped temporarily (1) 2022-06-24 Yano Research Institute: its site was hit by SQL injection and up to 101,988 member records may have leaked (1) 2022-06-23 Amagasaki City: a contractor employee lost a USB memory holding the resident register of all citizens, for a benefit program (2) 2022-06-23 Toyota Boshoku: the Thai sales company of its subsidiary TB Kawashima was accessed without authorization; server data leaked and was encrypted (1) 2022-06-22 Nichirin: the server of its US subsidiary was infected with ransomware and its production management system stopped (1) 2022-06-20 Naruto Yamakami Hospital: ransomware LockBit 2.0 broke in, leaving the electronic medical record and hospital LAN unusable (1) 2022-06-15 SODA: the database of the marketplace app "SNKRDUNK" was accessed without authorization and data of 2.75 million may have leaked (1) 2022-06-14 Dai Nippon Printing: unauthorized logins to its bookstore "honto" used email addresses and passwords leaked elsewhere (1) 2022-06-10 BOOK WALKER: unauthorized logins to its e-book store "BOOK☆WALKER" used email addresses and passwords leaked elsewhere (1) 2022-06-07 Seiwa: its three sites were accessed without authorization and order data of 5,548 people and card data of 423 may have leaked (1) 2022-06-06 J&T Environment: its website was accessed without authorization and used as a relay for suspicious emails (1) 2022-06-02 NAFCO: its server was accessed without authorization and point card payments and balance display failed (1) 2022-06-01 VIAX: its attendance server was hit by ransomware and data of up to 6,841 employees and dependents was encrypted (1) 2022-05-24 Soke Genkichoan: its online shop was accessed without authorization and card data of 14,127 customers may have leaked (1) 2022-05-19 Nikkei: a server of its Singapore Asia headquarters was infected with ransomware and may have held personal data (1) 2022-05-19 Quick: "Kangoroo!" suffered a password-list attack and points were misused in 1,877 accounts (1) 2022-05-18 Chouei: its server may have been attacked and was stopped; no leak of customer data was confirmed (1) 2022-05-18 MACHATT: its online store was accessed without authorization and card data of 16,093 customers may have leaked (1) 2022-05-16 FRONTEO: its US subsidiary suffered what looks like a ransomware attack that affected data center data (1) 2022-05-16 NIFCLOUD and FJcloud-V: its load balancers were accessed without authorization and customer credentials may have been stolen (1) 2022-05-12 Riken Nosan Kako: unauthorized access by a ransomware group caused a system failure (1) 2022-05-11 Ryobi: its Dalian subsidiary in China was hit by ransomware but recovered the next day (1) 2022-05-11 Shimamura: a system failure from unauthorized access since May 4 briefly stopped cashless payments (1) 2022-05-10 Brother Sales: unauthorized logins on its member site "Brother Online" affected up to 126,676 accounts (1) 2022-04-27 Kawamura Electric: the parent and four subsidiaries were hit by ransomware and internal systems stopped (1) 2022-04-25 Meiko Trading: its servers were hit by ransomware and customer data may have leaked (1) 2022-04-25 Utsunomiya Cable Television: its shopping site "Iimono, Aruyo!" was accessed without authorization and card data of 975 customers may have leaked (1) 2022-04-18 Keisei Construction: its server was hit by ransomware and part of the stored data was encrypted (1) 2022-04-15 Kyoto Station Building Development: its cloud server was accessed without authorization and personal data of about 4,650 people may have leaked (1) 2022-04-11 EDION: a server of the delivery management system run by a group company was accessed without authorization; 77,656 records were deleted and may have leaked (1) 2022-04-08 Daiwa Securities Group: servers and network of its UK M&A advisory subsidiary were accessed without authorization (1) 2022-04-08 Nippo Sangyo: the network of its Malaysian plant was accessed without authorization, likely through a VPN device flaw (1) 2022-04-08 Haneda Airport Face Express: a former employee of a sub-subcontractor abused administrator rights and took personal data of 1,046 people outside (2) 2022-04-06 Gekkeikan: its server was accessed without authorization and internal systems failed (1) 2022-04-04 Konica Minolta: the server of its London subsidiary was accessed without authorization; no leak of personal data was confirmed (1) 2022-04-01 Hearst Fujingaho: part of its servers and network systems was accessed without authorization; business is unaffected (1) 2022-03-28 Anzu: "Anzu no Helmet" was accessed without authorization and card data of 436 customers may have leaked (1) 2022-03-25 National Cancer Center East Hospital: a staff member's telework terminal was taken over and clinical study participants' data may have been viewed (1) 2022-03-24 Sanoh Industrial: its US subsidiary Sanoh America was hit by ransomware and internal information leaked (1) 2022-03-23 Access: the "Access Online Shop" was accessed without authorization and card data of 3,360 customers may have leaked (1) 2022-03-23 Irodori: the "mogans WEB shop" was accessed without authorization and card data of 977 customers may have leaked (1) 2022-03-22 Morinaga: its servers were accessed without authorization and personal data of 1,648,922 "Morinaga Direct Store" customers may have leaked (1) 2022-03-18 Bridgestone: its Americas group company Bridgestone Americas was hit by a ransomware attack (1) 2022-03-14 DENSO: the network of its group company in Germany was accessed without authorization; production is unaffected (1) 2022-03-11 H.I.S.: a PC is suspected to have been infected with Emotet and suspicious mail may be sent (1) 2022-03-09 RIKEN: some PCs were infected with Emotet and suspicious mail impersonating departments and staff was sent (1) 2022-03-07 FLYWAY: the "BIRDS’ WORDS online store" was accessed without authorization and card data of 2,763 customers may have leaked (1) 2022-03-07 NTT West: a PC used for work commissioned by the Aichi Prefectural University Corporation was infected with Emotet and email addresses leaked (2) 2022-03-07 Toei Animation: unauthorized access to its network made it stop internal systems and affected the broadcast of four TV anime series (1) 2022-03-04 Sani Clean Kinki: unauthorized access caused a system failure and its website also became unavailable (1) 2022-03-02 Asahi University: four teachers' email accounts were accessed without authorization and mail containing personal data was viewed (1) 2022-03-02 Higashiya Delica: its internal server was accessed without authorization in what appears to be ransomware and its systems malfunctioned (1) 2022-03-02 Unimedia: its hometown-tax support site "Furusato Premium" was hit by a password list attack (1) 2022-03-01 GMB: its servers were accessed without authorization in what appears to be ransomware and it cut the network (1) 2022-02-28 Beads: its website was accessed without authorization and 23,435 customer and partner email addresses may have leaked (1) 2022-02-28 Kojima Press Industry: a system failure halted all 14 Toyota plants in Japan; a cyberattack is possible (1) 2022-02-28 University of the Ryukyus: a web server managed by an engineering teacher was accessed without authorization and graduates' personal data may have leaked (1) 2022-02-25 Raksul: names and addresses of 4,248 customers who ordered prints leaked from a printing partner company (1) 2022-02-24 ACRO: the official online shops of "THREE" and "Amplitude" were accessed without authorization, and up to 103,935 pieces of data including card data may have leaked (1) 2022-02-24 Kinokuniya: some PCs were infected with Emotet and suspicious mail impersonating employees was sent (1) 2022-02-24 Nagoya University: three mail accounts of university hospital staff were accessed without authorization by brute force (1) 2022-02-22 Fujimi Incorporated: unauthorized access to its servers made it stop internal systems and suspend part of its production and shipping (1) 2022-02-22 Kurabun: unauthorized access caused a failure in part of its systems (1) 2022-02-21 Oka: "Mat & Rug Factory Honten" was accessed without authorization, and card data of up to 1,569 customers and personal data of up to 7,086 may have leaked (1) 2022-02-18 Hiroshima Prefecture: the cloud hosting the websites of the prefecture and 23 municipalities was hit by DDoS attacks and became hard to access (1) 2022-02-17 Taiki: a cyberattack caused a file server fault and it stopped its systems (1) 2022-02-10 Aichi Prefecture: its PCR test system was hit by ransomware and the attackers demanded Bitcoin (1) 2022-02-09 Kracie: some group PCs were infected with Emotet and suspicious mail impersonating employees was sent (1) 2022-02-08 Anicom Holdings: an employee PC was infected with Emotet and names and email addresses of internal and external contacts leaked (1) 2022-02-08 H.I.S.: the file server of its Vietnamese subsidiary was accessed without authorization, and personal data including passport details of up to 1,846 people may have leaked (1) 2022-02-07 Wacoal: some PCs were infected with Emotet and suspicious mail impersonating employees was sent (1) 2022-02-03 Lion: an employee PC was infected with Emotet and names and email addresses of internal and external contacts leaked (1) 2022-02-01 Keifuku Electric Railroad: the Randen official site was accessed without authorization and became unavailable (1) 2022-01-29 Nichinoken: its web server was accessed without authorization and up to 280,106 email addresses may have leaked (1) 2022-01-28 Kansai University: the server of its IT center was accessed without authorization and part of its systems failed (1) 2022-01-28 Sekisui House: some group PCs were infected with Emotet and suspicious mail impersonating employees was sent (1) 2022-01-27 Daicel: a server operated by the group was accessed without authorization and information might have leaked outside (1) 2022-01-27 Rintatsu: its server was accessed without authorization, and it stopped PCs and the network because of a ransomware risk (1) 2022-01-25 Beverly Glen Laboratories: its "b.glen HP" shop was accessed without authorization, and card data of 46,702 customers may have leaked (1) 2022-01-25 Moncler Japan: Moncler's IT systems suffered a sophisticated cyberattack, and personal data of customers in Japan may have leaked (1) 2022-01-25 Niigata Prefecture: the mail server of its civil engineering disaster information system was accessed without authorization and used to send malicious email (1) 2022-01-25 Metaps Payment: a vulnerability in its payment center was exploited, information in the "token method" database likely leaked, and it stopped payment services (1) 2022-01-24 A-One Tokyo: its dedicated system was accessed without authorization, and data on customers, applicants and staff leaked (1) 2022-01-19 Kasugai Rehabilitation Hospital: suspected unauthorized access to its medical information system disrupted its electronic records and billing systems (1) 2022-01-17 Hokusen: part of its servers was accessed without authorization, and it stopped its web service and new card applications (1) 2022-01-17 Kawata: its "COCO SEASONS online shop" was accessed without authorization, and card data of 303 customers may have leaked (1) 2022-01-14 LAC: a former employee sold a hard disk with privately backed-up business data at a flea market, and business documents leaked (1) 2022-01-12 Marukan: its online shop was accessed without authorization, and card data of 1,152 customers may have leaked (1) 2022-01-12 Umano Chemical Container: its former online shop was accessed without authorization, and card data of 191 customers may have leaked (1) 2022-01-11 Ishibashi Music: unauthorized access to its web server may have leaked 98,635 point card members' email addresses (1) 2022-01-11 Tachibana Shobo: its former website was accessed without authorization, and card data of 1,144 customers may have leaked (1) 2022-01-04 Tokyo Computer Service: a cyberattack infected it with ransomware, and a leak of internal management information was confirmed (1) 2021-12-29 Iwatani: a forum invitation was sent with recipients visible, exposing 2,889 email addresses to each other (1) 2021-12-28 Shinsei Bank: in a data migration to Monex Securities it wrongly sent customer data of 1,469 accounts that were not to be transferred (1) 2021-12-27 Japan Aviation Electronics: its file server was accessed without authorization, and some data may have leaked (1) 2021-12-24 Kaneko Seeds: several in-house terminals were infected with malware, and personal data and some corporate information may have leaked (1) 2021-12-24 Shimanto Town: the server of the subcontractor maintaining its smartphone app was hit by ransomware and the app was suspended (1) 2021-12-23 Toyo Ink SC Holdings: its owned media site "TOYO INK 1050+" was accessed without authorization and partly defaced (1) 2021-12-23 National Council of Social Welfare: its publishing site "Fukushi no Hon" was accessed without authorization, and 41,970 email addresses leaked (1) 2021-12-23 Titicaca: its online shop was accessed without authorization, and card data of 861 customers may have leaked (1) 2021-12-22 Nihon Hifuku Kogyo: past emails leaked and suspicious emails impersonating its staff were sent (1) 2021-12-22 Tohoku Institute of Technology: the Faculty of Life Design website was attacked through a CMS vulnerability and an obfuscated malicious script was planted (1) 2021-12-21 NOK: its server was accessed without authorization, causing a system failure, and it cut external communication (1) 2021-12-20 Hakusan Shinkin Bank: its website was accessed without authorization and part of its program was rewritten, and it was closed for about two days (1) 2021-12-20 Kobe Bussan: its server was accessed without authorization, and personal data and some corporate information leaked (1) 2021-12-20 Caucus (now Shuri Sekken): its SuiSavon online shop was accessed without authorization, and card and personal data of up to 1,217 customers leaked (1) 2021-12-18 Tonami Shinkin Bank: its website was defaced (1) 2021-12-16 Pacific Consultants: the Tottori Forest Cloud System it maintains was attacked and forest registers and other files were encrypted (2) 2021-12-16 Tokyo Metropolitan Public University Corporation: the website of a Tokyo Metropolitan University department was defaced after unauthorized access (1) 2021-12-10 Dwango: several unauthorized logins to Niconico used passwords leaked from other services (1) 2021-12-09 Nippon Express: servers and PCs of its Singapore subsidiary were accessed without authorization, and information may have leaked (1) 2021-12-08 PFI Kubu Youth Plaza: the website of the Tokyo Sports Culture Hall it runs was accessed without authorization, possibly affecting six form entries (1) 2021-12-07 Nishinomiya City: its internal groupware was hit by an SQL injection attack, user data leaked and mails impersonating staff were sent (1) 2021-12-06 DRESS DESIGN WORKS: its dress shop "Tika" was accessed without authorization, and card data of up to 8,306 customers may have leaked (1) 2021-12-06 LINE Pay: campaign participation data was viewable on GitHub, involving 51,543 accounts in Japan (1) 2021-12-02 Ehime University: its research results website was defaced after unauthorized access and the server was stopped (1) 2021-12-02 Oki Electric Industry: its file server was accessed without authorization, and partner information and more may have been read (1) 2021-12-01 Ayahadio: its online shop was accessed without authorization, and card data and customers' personal data may have leaked (1) 2021-12-01 Royal Home Center: the server of its official site was accessed without authorization and the site was stopped for about three weeks. No leak of personal data was found (1) 2021-11-30 Development Bank of Japan: its Singapore subsidiary was hit by a cyberattack and stopped its servers and mail (1) 2021-11-30 Groundworks: its EVANGELION STORE (online) was accessed without authorization, and 17,828 card records may have leaked (1) 2021-11-30 Heiwado: a bug on its gift and osechi shop let customers see others' data, involving up to 4,774 records (1) 2021-11-29 SIIX: internal servers and PCs of its Indonesian subsidiary were infected with ransomware (1) 2021-11-27 Takarazuka University: its website was accessed without authorization and search-result visitors were redirected to unrelated sites (1) 2021-11-26 JEC: its storage was accessed without authorization and became inaccessible, and data on contacts and trainees at client firms may have leaked (1) 2021-11-26 Panasonic: its file server was accessed without authorization and some data was read (1) 2021-11-25 Vendome Yamada: its Vendome Jewelry Online Store was accessed without authorization, and card data of 2,715 customers leaked (1) 2021-11-24 Digital Agency: in a press email it put 408 journalists' addresses in CC instead of BCC (1) 2021-11-24 Tsuru Credit Union: emails impersonating the union were sent to many people, and its website became unviewable (1) 2021-11-22 Pharmaceutical Society of Japan: its website was accessed without authorization and restored through emergency maintenance (1) 2021-11-19 Japan Association of Corporate Executives: its secretariat system was accessed without authorization, and personal data may have leaked (1) 2021-11-17 Santane: its Seikotei net shop was accessed without authorization, and card data and personal data of some customers may have leaked (1) 2021-11-15 Tocochan.com: its EC site was accessed without authorization, and 507 card records and login data may have leaked (1) 2021-11-11 Ishifuku Metal Industry: its corporate site was accessed without authorization and emergency maintenance was carried out (1) 2021-11-10 Chofu City: it passed nine information-disclosure request forms to related bodies without masking the requesters' names and addresses (1) 2021-11-10 Sunmedia: its website was accessed without authorization and defaced, through a vulnerability in leftover old MovableType files (1) 2021-11-08 Yamadai: its official website was accessed without authorization and defaced (1) 2021-11-05 RIKEN: its learning management system was accessed without authorization, and about 14,000 personal records may have leaked (1) 2021-11-04 Link It: its LINK IT MALL shop was accessed without authorization, and card data of 6,197 customers may have leaked (1) 2021-11-04 Right-on: its official online shop was accessed without authorization, and names, addresses and more of 247,600 members leaked (1) 2021-11-01 Endless: its "PARTS CLUB Online" shop was accessed without authorization, and card data of some customers may have leaked (1) 2021-11-01 Oami (AmiAmi): the Twitter account of its product planning division was hijacked, and direct messages of campaign winners may have been viewed (1) 2021-10-31 Tsurugi Town Handa Hospital: LockBit 2.0 broke in, the electronic medical record became unusable and normal care was impossible for about two months (1) 2021-10-29 Nagoya University: the mail accounts of two teachers were accessed without authorization and abused to send spam in bulk (1) 2021-10-28 Kanetaya Furniture: its ROOMDECO online shop was accessed without authorization, and card data and login data leaked (1) 2021-10-27 KLab: unauthorized logins to KLab ID, likely a password-list attack, were confirmed on 2,846 accounts (1) 2021-10-27 Linical: its European subsidiary was hit by a cyberattack, and someone calling themselves Ragnar Locker sent a ransom threat (1) 2021-10-27 Tanax: its online shop was accessed without authorization, and card data of 26 customers may have leaked, including 3-D Secure passwords (1) 2021-10-25 Net Tower: its Tapioca World shop was accessed without authorization, and 301 cards of 226 customers may have leaked (1) 2021-10-22 Mitsubishi Electric and Mitsubishi Electric Information Systems: a network managed by Mitsubishi Electric was accessed from abroad and part of the domestic customer data leaked (2) 2021-10-22 Saitama University: a work PC with a weak password was logged into without authorization and files on a campus server were altered (1) 2021-10-22 Suzuki: its Indonesian subsidiary was accessed without authorization, halting part of a four-wheel plant for two days (1) 2021-10-20 Gunma University: one user's account on a mail server was accessed without authorization and used to send about 570,000 spam emails (1) 2021-10-20 Icons: its ALPHAICON official shop was accessed without authorization, and card data of 93 customers may have leaked (1) 2021-10-15 Cock Foods: its server was attacked with ransomware and much of its business data was encrypted (1) 2021-10-15 The University of Tokyo: the HPCI primary center's user management server was accessed with administrator rights, and IDs and encrypted passwords may have leaked (1) 2021-10-14 Kuraray: a server it operates was accessed without authorization, and names and company contacts of business partners and employees may have leaked (1) 2021-10-12 Chiba City (FeliCa Pocket Marketing): a contractor server for the Chiba City Point trial was accessed without authorization, and birth dates of about 8,000 participants may have leaked (2) 2021-10-12 Fuji Hospital: unauthorized access from outside disrupted part of its systems and medical care was partly restricted; medical data may have leaked (1) 2021-10-12 Olympus: IT systems in the Americas were accessed without authorization, and the affected systems were stopped (1) 2021-10-07 OYO Corporation: some servers of its Land Information Report service were attacked with ransomware, partly halting the service (1) 2021-10-06 Media Kobo: names of up to 269 casts leaked from its voice-call social network "Characden" (1) 2021-10-06 Japan Pension Service: its printing contractor printed another person's details on pension payment notices, and 975,065 were sent wrongly (2) 2021-10-05 Linical: traces of unauthorized access were found on its server, which was temporarily stopped to investigate (1) 2021-09-29 JVCKENWOOD: servers of three European sales companies were accessed without authorization, and personal data of business partners and staff may have leaked (1) 2021-09-29 Spick: its Lipo Capsule Vitamin C shop was accessed without authorization, and card data of 9,515 customers and login data of 15,674 members may have leaked (1) 2021-09-24 LogoVista: its website was accessed without authorization, and about 128,000 member email addresses leaked (1) 2021-09-16 Aplus, Shinsei Bank and Shinsei Financial: customer login details and email addresses were mistakenly given to web analytics contractors, 475,813 customers at Aplus (3) 2021-09-16 GR: servers of its Omni EC system were accessed without authorization, and customer data of ten retailers leaked (11) 2021-09-16 Shizuoka University: a faculty cloud server was accessed without authorization and used to send about 53,000 spam emails (1) 2021-09-16 Yamaga: its Kabuyama fugu online shop was accessed without authorization, and card data of 272 customers may have leaked (1) 2021-09-14 Sanritsu Seika: a cyberattack stopped its systems and the network was cut (1) 2021-09-14 Sekiya Shokuhin: its Ise Sekiya online shop was accessed without authorization, and card data of 23 customers may have leaked (1) 2021-09-11 Olympus: IT systems for sales and manufacturing in Europe, the Middle East and Africa were hit by malware through unauthorized access (1) 2021-09-08 Aichi Cancer Center: a doctor's cloud account was accessed without authorization, and emails with data on 183 patients may have leaked (1) 2021-09-07 Akechi Railway: its website was accessed without authorization and defaced, and data of up to 4,608 diner-car reservation customers may have leaked (1) 2021-09-07 Tachikichi: its online shop was accessed without authorization, and card data of 677 customers may have leaked (1) 2021-09-07 United: its Konin-todoke Seisakusho site was accessed without authorization, and card data of 1,131 customers may have leaked (1) 2021-09-01 Nishi-Nihon Medical Link: its network was accessed without authorization from outside and a file server was damaged (1) 2021-09-01 Yagami Seisakusho: it was infected with ransomware and all its servers stopped (1) 2021-08-31 Muto: its servers were attacked with ransomware (1) 2021-08-30 Abe Cho Shoten: its internal network was hit by ransomware, encrypting business data and personal data (1) 2021-08-26 Kobe Kaisei Women's College: the credentials of one department email account were stolen and it was used from outside to send about 10,000 spam emails (1) 2021-08-26 Ohara Gakuen: a roster of 1,106 trainees of a training project entrusted by the Ministry of Health, Labour and Welfare was kept in the cloud against the specification, and an email with its URL was mistakenly sent to one applicant (1) 2021-08-24 Cecile: Cecile Online Shop was hit by a credential stuffing attack, and one of 21 login attempts succeeded, so customer information may have been viewed (1) 2021-08-23 Komaki Gakki: its online shop was accessed without authorization, and card data of 1,513 customers may have leaked (1) 2021-08-20 Borderless: the old site of its doll shop DOLK STATION was accessed without authorization, and information of 24,228 members may have leaked, found after an extortion email (1) 2021-08-20 Oriental Consultants group: ransomware hit several servers, encrypting much of its business data, which may have leaked; data entrusted by Ichikawa City and Saitama Prefecture was also stored there (10) 2021-08-20 QUOINE (Liquid): administrative crypto asset wallets were accessed without authorization, and crypto assets worth about 754 million yen were lost (1) 2021-08-19 Mitsuuroko Vessel: customer data of 5,259 Mitsuuroko Hikari subscribers, used to check billing statements, was mistakenly sent to one corporate client (1) 2021-08-18 EIZO: the email account of a local employee abroad was hijacked and used to send 620 targeted attack emails leading to a phishing site (1) 2021-08-18 Gap International: THE HAIR BAR TOKYO online store was accessed without authorization, and 4,538 card records may have leaked, about 4,000 of them used for validity checks (1) 2021-08-18 JTB: its US group companies were accessed without authorization, and 2,525 romanized names and 2,396 email addresses of travelers may have leaked (1) 2021-08-16 Fukuya: FUKUYA ONLINE was accessed without authorization and its payment program was altered, so card data of 1,779 customers may have leaked (1) 2021-08-16 Tokio Marine Holdings: its Singapore group company Tokio Marine Insurance Singapore was hit by a ransomware attack, with no sign of a customer data leak (1) 2021-08-13 Bewith: its internal network was hit by ransomware and information on 15,421 applicants and 9,375 employees was encrypted, with no leak confirmed (1) 2021-08-12 Hokkaido Federation of National Health Insurance Associations: data on 8,903 elderly insured people of Noboribetsu City, including health check results, was mistakenly sent to Saroma and Toyokoro towns (1) 2021-08-12 MIKATA: 13,756 login email addresses and encrypted passwords of the EC industry media site EC no Mikata leaked, found after a tip from Nikkei (1) 2021-08-11 Kasama City: when mailing care insurance premium notices, a contractor's enclosing error put another person's payment slip in 1,451 envelopes (1) 2021-08-05 Murata Manufacturing: an employee of its sub-subcontractor IBM Dalian in China downloaded data on 72,460 partners and employees without permission and uploaded it to a personal cloud account (1) 2021-08-04 Okayama University Hospital: a doctor's personal cloud service ID and password were stolen by phishing, leaving a file with information on 269 patients open to the attacker (1) 2021-07-30 Boehringer Ingelheim Animal Health Japan: information on over 50,000 registered users and over 10,000 veterinarians of its flea, tick and filaria site leaked from a contractor's old server (1) 2021-07-30 JR West Housing Service: a PC installed at a property was accessed without authorization, and room numbers and names of up to 8,000 residents may have leaked (1) 2021-07-30 Sotetsu Building Management: the website of the shopping complex Joinus was tampered with and moved visitors to another site (1) 2021-07-26 SONS-MARKET: its woodworking tool online shop KQLFT TOOLS was accessed without authorization and its payment function was altered, so card data of 584 customers may have leaked and been misused (1) 2021-07-23 KLab: a mass of requests hit KLab ID, and about 520,000 confirmation emails were sent to the addresses of unspecified non-members (1) 2021-07-21 LINE: all streamed videos of its ticketed live service LINE Face2Face were open to unauthorized access, and online handshake event videos were re-uploaded to a video sharing site (1) 2021-07-21 Mainichi Genki: its health food online shop was accessed without authorization, and card data of 283 customers may have leaked and been misused (1) 2021-07-20 Candil Design: its repair materials online shop Pro Shop Takumi was accessed without authorization, and card data of 3,357 customers may have leaked (1) 2021-07-19 FLAVA: its fashion online shops jiggys-shop.jp and crazy-ferret.jp were accessed without authorization, and card data of 6,316 customers may have leaked, with 618 possibly misused (1) 2021-07-14 Yomiuri Joho Kaihatsu Osaka: its online shop Yomifa-net was accessed without authorization, and card data of 1,301 customers leaked, with 58 customers' cards misused for about 7.67 million yen (1) 2021-07-13 Japan Chemical Database: an SQL injection attack leaked 1,652 customers' personal records and 166 company records (1) 2021-07-13 TRANSIC: its bag and leather goods online shop TRANSIC was accessed without authorization, and card data of 1,074 customers may have leaked (1) 2021-07-12 Cosmos Pharmaceutical: its Cosmos Online Store was accessed without authorization, and card data of 25,484 customers may have leaked (1) 2021-07-12 Sapporo Nissin Electronics: someone logged into the app used to update its website without authorization and placed a page for phishing (1) 2021-07-12 Shionogi: its wholly owned Taiwan subsidiary was hit by a cyberattack, and employee information was found on the dark web (1) 2021-07-11 Yokohama City: documents with the names, infection routes and more of 165 COVID-19 patients were mistakenly faxed to 28 media outlets (1) 2021-07-10 Ehime University: a file with scholarship information and the personal data of all roughly 9,000 students was mistakenly emailed to 17 students (1) 2021-07-09 Japan Marine Equipment Association: one staff PC was infected with a virus presumed to be Emotet, found after members received a suspicious email in a staff member's name (1) 2021-07-09 Nippn: its group network was widely encrypted by ransomware, core systems stopped, results announcement was postponed, and part of corporate and personal data may have leaked (2) 2021-07-09 PR TIMES: image and PDF files of unpublished press releases on its distribution service were obtained without authorization (1) 2021-07-08 Jupiter Golf Network: its Golf Network mail news delivery system was logged into without authorization, and about 40,000 email addresses leaked (1) 2021-07-07 Morisawa: three employees' email accounts were accessed from abroad, and English phishing emails posing as employees were sent (1) 2021-07-07 Ryukoku University: part of its website was tampered with, so searching its research pages redirected visitors to outside sites (1) 2021-07-06 Mouse Computer: its product review tool was accessed without authorization, and email addresses and purchased product names of customers and partners leaked (1) 2021-07-06 Songbook Cafe: its online shop for childcare workers Hoick was accessed without authorization, and card data of up to 2,365 customers may have leaked (1) 2021-07-05 Immigration Services Agency: the system of its Trusted Traveler Program (TTP) was accessed without authorization, and information about its configuration devices may have leaked (1) 2021-07-02 Nissin: the server of its US subsidiary was accessed without authorization, and stolen information was found on the dark web (1) 2021-07-02 NTT Logisco: its Chiba logistics center was accessed without authorization, and it first said up to 8 million customer records of the client NTT Plala might have leaked, but the number turned out to be about 500 with no trace of a leak (1) 2021-07-01 Kawasaki Kisen: the system of an overseas subsidiary was accessed without authorization, and information held by the subsidiary may have leaked (1) 2021-06-30 F.E.N.: its fashion information site fenlink.net was accessed by exploiting a vulnerability, and members' names, addresses, emails and, for older members, passwords are likely to have leaked (1) 2021-06-30 Oricon: the password of one email account was stolen and used to access it, leaving names and work email addresses of 17,625 business contacts open to view (1) 2021-06-30 Tohoku Institute of Technology: an email account was accessed without authorization, spam was sent to unspecified recipients abroad, and the mail of 1,042 people may have been read (1) 2021-06-29 Takasaki City University of Economics: a lecturer's email account was accessed without authorization and used to send about 6,000 spam emails (1) 2021-06-28 Kanagawa Shinkin Bank: 1,094 tuition auto-transfer records were sent through a cloud service to 79 unrelated schools, including names of 599 children and staff and 495 account records (1) 2021-06-24 The Bank of the Ryukyus: a setting flaw in the external cloud of its web application site let a third party access data of 245 customers, including account numbers and encrypted PINs (1) 2021-06-24 Biz Up Soken: its online shop Biz Up Soken Online Shop was accessed without authorization and its payment application was altered, so 200 cards of 194 customers may have leaked and been misused (1) 2021-06-24 Japan Airport Fueling Service: its servers were infected with ransomware, data was encrypted and payment in crypto assets was demanded, with no effect on aircraft fueling (1) 2021-06-24 Chunichi Shimbun (contractor Landmarks): the server of the campaign entry sites of Tokyo Shimbun, Chunichi Shimbun and Hokuriku Chunichi Shimbun was accessed without authorization, and about 143,000 records of personal data were deleted and may have leaked (2) 2021-06-23 Idehome: a customer list of about 7,000 property buyers in the Tokai area, with names and addresses, passed from employees of a past construction contractor to a sales solicitation firm and was used for cold calls offering free pipe inspections (1) 2021-06-22 Higashiosaka City Medical Center: its medical imaging system was accessed without authorization and went down, and images from before the failure remained unviewable (1) 2021-06-22 neten: its spiritual goods online shop Logostron.com was accessed without authorization and its payment application was altered, so card data of 2,441 customers may have leaked (1) 2021-06-22 Yamashita: the server of a company that rents and sells welfare equipment and supplies linen was accessed without authorization, and information including personal data leaked to an overseas server (2) 2021-06-22 Yayoi: its single sign-on integration server was accessed without authorization, and Yayoi IDs and passwords of 18,364 users who set up integrations or tried to log in may have been stolen, while login tokens of 585,341 users were exposed (2) 2021-06-21 Gunma Prefecture Education and Culture Foundation: the ticket reservation center of Gunma Kenmin Kaikan was accessed without authorization in July 2019, and emails and passwords of 5,259 members leaked to the dark web (1) 2021-06-17 Daiichi Denkasha: its cafe goods online shop Daiichi F&L Online Shop was accessed without authorization and its payment application was altered, so up to 2,551 cards of 1,246 customers may have leaked and been misused (1) 2021-06-16 Sports Club NAS: two servers in its data center had all data encrypted by ransomware, disrupting its member management system, and a message demanding the purchase of a decryption tool was left (1) 2021-06-16 Kyoto Takao Club: its low-carb food online shop Toshitsu Seigen Dot Com was accessed without authorization and its payment application was altered, so card data of 3,877 customers may have leaked and been misused (1) 2021-06-15 Ito Yogyo: one server was hit by ransomware, with no impact on business and no information leak confirmed (1) 2021-06-15 Paramount Bed: an employee's virtual desktop was infected with malware, and addresses and bodies of past emails may have leaked, with suspicious emails reusing those messages sent out (1) 2021-06-14 Claudia: its health food online shop Claudia HP was accessed without authorization and its payment application was altered, so data of 8,644 cards may have leaked and been misused (1) 2021-06-11 Corporate Environmental Risk Solution Institution: a newsletter was sent with a spreadsheet holding personal data of 1,976 customers attached by mistake (1) 2021-06-11 National Institute for Environmental Studies: a staff member's Microsoft 365 email account was logged into without authorization, and the contents and addresses of about 50,000 emails may have leaked, with spoofed emails sent (1) 2021-06-10 Hinode Publishing: its online shops Safari Lounge and Official Store were accessed without authorization, and data of 5,947 cards in total may have leaked, with about a year from the warning to the report (1) 2021-06-09 JA Takasaki Ham: its online shop Takasaki Ham Online Shopping was accessed without authorization and its payment application was altered, so data of 183 cards of 123 customers may have leaked (1) 2021-06-08 Okinawa Prefecture: an email about a teacher candidate exam to 3,000 applicants had addresses entered in the wrong field, so they were visible to the other recipients (1) 2021-06-07 Drome: its e-cigarette online shop Veplog Shop was accessed without authorization and given a fake payment form, so 32 cards may have leaked, and member data of its review site Veplog was also affected (1) 2021-06-07 Kaneda: its internal systems were infected with ransomware, some servers and PCs became inaccessible, and it shut down all company systems and the network (1) 2021-06-07 Osaka Metro Service: the email account of a former employee was accessed without authorization and used to send about 1,000 spam emails (1) 2021-06-07 Yupiteru: personal data of 405,576 members of its member site My Yupiteru was stolen in an unauthorized access in 2017, which came to light in May 2021 through an extortion email (1) 2021-06-05 Sanrio Entertainment: its corporate site was hit by SQL injection, and 46,421 email addresses of Sanrio Puroland fan club members may have leaked (1) 2021-06-04 KADOKAWA: servers of its Taiwanese subsidiary Taiwan Kadokawa suffered unauthorized access that appears to be ransomware, and personal and corporate information may have leaked (1) 2021-06-04 Osaka City: an error in preparing enrolled child lists for nursery facilities sent names, birth dates and other data of 3,692 unrelated children to 98 facilities (1) 2021-06-03 Saison Automobile and Fire Insurance: its policyholder page My Page suffered unauthorized logins on about 10,000 user IDs, and customer information may have been viewed (1) 2021-06-02 FUJIFILM: its domestic network was infected with ransomware and servers and PCs were shut down, which disrupted inquiry desks, orders and shipments for about two weeks. No trace of data leaving the company was found (1) 2021-05-31 EPARK: a cache fault after adding a feature to its reservation site showed names, reservation history and other data of some members on other members' screens, up to 4,949 records (1) 2021-05-31 Nippon Kaiji Kentei Kyokai: its Singapore office was hit by a cyberattack, and customer information of a Mitsui Sumitomo Insurance subsidiary that had entrusted it with claim surveys may have leaked (2) 2021-05-28 NITOMS: an employee fell for smishing, a third party used the account, and information on contacts at business partners may have leaked (1) 2021-05-27 Reimei: its online shop R Mall, which sells skin care salt and other goods, was accessed without authorization, and credit card data of 2,032 people may have leaked and been misused (1) 2021-05-27 Shokei Gakuin: a staff email account of Shokei Gakuin University was taken over from abroad and used to send 1,639 spam emails, and 1,634 stored emails may have been viewed (1) 2021-05-25 Osaka Kyoiku University: a teacher at its attached elementary school fell for smishing and their personal Apple ID was taken over, and the cloud held images showing pupils' personal data (1) 2021-05-25 Progate: its programming learning service suffered a password list attack, and 6 accounts were logged into without authorization (1) 2021-05-24 Bleu Claire: the payment application of its cosmetics online shop was tampered with, and credit card data of 1,863 people may have leaked and been misused (1) 2021-05-21 Mercari: credentials were stolen through a tampered development tool, Codecov, and part of its source code and information on 27,927 customers, business partners and employees leaked (2) 2021-05-21 Net Marketing: images of age verification documents of 1,711,756 accounts of the matching app Omiai leaked through unauthorized access (1) 2021-05-20 Fujitsu: its project information sharing tool ProjectWEB was accessed without authorization and information entrusted by customers was stolen, including data of the Cabinet Secretariat, MLIT, MOFA and Narita International Airport (7) 2021-05-20 KOKUYO: its dealer search site was tampered with and visitors were sent automatically to suspicious outside sites (1) 2021-05-20 Sumitomo Mitsui Trust Bank: a Salesforce setting flaw in its card loan application desk exposed data of 2,101 applicants to outsiders, and data of 102 may have leaked (1) 2021-05-19 Planet: the payment application of its perfume online shop Kousui Gakuen was tampered with, and credit card data of 2,821 people may have leaked and been misused (1) 2021-05-18 Dinos: its mail order site Dinos Online Shop suffered a password list attack, with 41 unauthorized logins among 1,605 login attempts (1) 2021-05-17 Intermestic (Zoff): its servers were infected with ransomware and personal data of about 97,000 customer records leaked (1) 2021-05-17 Fuji Dry: the payment application of its kimono cleaning delivery site Sentaku Kobo was tampered with, and credit card data of 565 people may have leaked and been misused (1) 2021-05-17 Toshiba Tec: five subsidiaries in four European countries were hit by ransomware at the same time, causing system failures, and data may have been stolen (1) 2021-05-16 Daihatsu Diesel: a European group company was accessed without authorization and its file server became unreachable (1) 2021-05-14 Bukkyo University: a spreadsheet with bank account details of 237 past grantees and vendors was attached by mistake to 92 emails guiding researchers on grants (1) 2021-05-14 Ikoma City: an elementary school teacher fell for smishing and their personal iCloud was briefly taken over, so images showing 41 sets of staff account IDs and passwords may have been viewed (1) 2021-05-14 Komori Corporation: the file server of its US subsidiary was infected with ransomware and data thought to be from the server was published externally (1) 2021-05-11 IT Craft: the server of its online reception system for animal hospitals, Reserve, was accessed without authorization and the service was stopped (1) 2021-05-11 The Kanagawa Bank: it unknowingly emailed a spreadsheet containing 11,941 customer records to 30 business partners 39 times (1) 2021-05-11 Settsu Metal Industry: it was infected with the Avaddon ransomware, damaging 14 servers and 11 PCs (1) 2021-05-10 Chiba University: a personal cloud account used by a doctor at its university hospital was taken over by phishing, and data on 586 patients may have leaked (1) 2021-05-10 Eiheiji Town: a University of Fukui staff member lost a USB drive holding data of 1,388 patients at the town's home-visit clinic (2) 2021-05-10 Keio University: the meeting room reservation system of its Shonan Fujisawa Campus graduate building was accessed without authorization, and 6,507 personal data entries of people who booked may have leaked (1) 2021-05-10 The Okinawa Kaiho Bank: 3,497 cancelled seal impression cards (for 2,549 customers) from six branches are missing, probably discarded by mistake (1) 2021-05-07 GEO CODE: its corporate site was tampered with through a flaw in WordPress, and visitors on smartphones were redirected to an outside site (1) 2021-05-06 Toyota Corolla Shiga: its Facebook account was accessed without authorization and many unintended video messages were sent to connected customers (1) 2021-04-30 Tradeworks: the server of one financial institution using its hosted internet trading service was accessed without authorization (1) 2021-04-27 Fuji Keizai Management: a cyberattack knocked out the systems of the whole Fuji Keizai group and disrupted deliveries and customer inquiries (1) 2021-04-27 Kansai Airports Retail Service: the pre-departure reservation site of its Kansai International Airport duty-free shops was accessed without authorization, possibly leaking data on up to 31 lottery winners (1) 2021-04-27 Tokyo Metropolitan Government: a box of education grant survey forms from kindergartens and elementary schools went missing at its Bureau of Citizens, Culture and Sports, along with 3,646 pieces of personal data (1) 2021-04-27 Tokyo Metropolitan Government: a flaw in its vaccine reservation system for health workers let outsiders view data on 270,000 registered people with a certain operation, and it was stopped after one day (1) 2021-04-26 Nissan Securities: unauthorized access hit three web servers of its online trading system, and it suspended three services, including futures and options trading, for the time being (1) 2021-04-26 Okano Valve: ransomware infected three of its 13 servers, including the file and mail servers, and the attackers demanded money (1) 2021-04-26 Subway Japan: its file server was infected with ransomware, and information on about 10,000 people such as employees and franchise parties may have leaked, including passport and bank account data (1) 2021-04-23 Taito: its server holding game data for the smartphone game Rakugaki Kingdom was accessed without authorization, and some data was deleted and may have leaked (1) 2021-04-22 Cabinet Office: the FileZen file sharing storage used by its staff came under a zero-day attack, and non-public data on 231 people may have leaked (2) 2021-04-19 TECRA: an email to pre-registrants of its real estate crowdfunding service TECROWD showed 1,204 email addresses to all recipients (1) 2021-04-16 Bank of Yokohama: it emailed a spreadsheet holding data on 41,729 customers to an advertising contractor by mistake, twice (1) 2021-04-15 BtcBox: its web server was accessed without authorization, scam emails posing as the exchange were sent to customers, and ID verification images may have been stolen (1) 2021-04-15 Environmental Restoration and Conservation Agency: a third party sent a large number of suspicious emails through its mail server (1) 2021-04-14 Hakusensha: malicious code was added to parts of its website, sending visitors to a malicious external site (1) 2021-04-13 Mirai Works: its side-job support site Skill Shift was accessed without authorization, leaking the application attachments of 1,053 individual members and more (1) 2021-04-12 Active Gaming Media: its game news site AUTOMATON was tampered with and showed a fake reCAPTCHA pop-up for about an hour (1) 2021-04-12 Ijindo: the payment application of its castella online shop was tampered with, possibly leaking 738 credit card records of 709 people, which may have been misused (1) 2021-04-09 Denyo: a mail account was accessed without authorization and abused to send mass spam, and the mailbox contents may have been stolen (1) 2021-04-09 Sotetsu Hotel Management: 3,093 reservation records of Hotel Sunroute Taipei were stolen from a relay server at a Taiwanese contractor, and customers got scam calls posing as the hotel (1) 2021-04-07 Ishiguro: the payment applications of its two fishing tackle online shops were tampered with, possibly leaking 4,026 credit card records of 3,171 people, which may have been misused (1) 2021-04-07 National Hospital Organization: a work laptop taken home by an employee of Himeji Medical Center, holding about 140,000 patient records, was put up for sale at an internet auction (1) 2021-04-06 Nichiryoku: the server of this cemetery and funeral business was accessed without authorization, and it investigated whether information had leaked (1) 2021-04-05 en Japan: its job posting service engage was accessed without authorization, all folders holding images and videos on a server were deleted, and the data could not be fully restored (1) 2021-04-05 Yoshihara Systems: the new system of its home-delivery cleaning service Sentakubin was hit by SQL injection and old-system data sat open to outsiders, so card data of up to 58,813 people may have leaked (1) 2021-04-03 Human Academy: the B3 League streaming site B3TV came under a DoS attack and became hard to reach (1) 2021-03-31 Fukuoka Prefecture: the mail server of the sea condition data system of its Fisheries and Marine Technology Center was accessed without authorization and abused to send about 200,000 spam emails a day (1) 2021-03-31 Nagoya University: a teacher at its university hospital had a password stolen by phishing, and data on 333 students and 2 teachers in the mail account may have been viewed (1) 2021-03-31 Yutori no Kukan: its online shop was tampered with through a vulnerability, and 5,009 member records and 4,509 credit card records may have leaked (1) 2021-03-29 DesignX: the payment page of its business-to-business shop ApparelX was tampered with, possibly leaking 195 credit card records (1) 2021-03-29 Kenko Ikiiki Club: the program of its official online store was tampered with, possibly leaking 3,308 card records, and the server holding personal data was also accessed (1) 2021-03-29 Kenko: the payment application of its ostomy supplies shop Kenko Online Shopping was tampered with, possibly leaking 152 card records (1) 2021-03-29 Tokyu Community: a former employee took data on about 5,000 apartment residents from the management system in two rounds and gave it to an outside company (1) 2021-03-26 Yukiyama: its ski slope tracking app yukiyama was accessed without authorization, and the images and run logs of all users were deleted and could not be recovered (1) 2021-03-25 Hirota: a mail magazine was sent with recipients set in the To field by mistake, letting 2,350 subscribers see each other's email addresses (1) 2021-03-24 Hasegawa Saketen: its online store was accessed without authorization, possibly leaking credit card data of 2,865 people (1) 2021-03-24 Initio Foods: attackers exploited a network device vulnerability to reach its server, possibly leaking personal data of about 65,000 customers, business contacts and employees (1) 2021-03-24 Matsui Securities: a former employee of its system contractor SCSK stole customers' IDs and passwords and illegally withdrew about 200 million yen from 15 customers (1) 2021-03-23 Tsuyuki: the Futon no Tsuyuki online shop was accessed without authorization, possibly leaking up to 19,197 card records, of which 1,784 were real completed payments (1) 2021-03-23 Hosendo: servers of its online shops Suppon Collagen and Hosendo Power Life were accessed without authorization, possibly leaking addresses, birth dates and card data of 243 customers (1) 2021-03-19 Takara Holdings and Takara Shuzo: a dummy file for a payroll system migration still held real My Number data and was emailed to an outside developer, covering 4,167 people (2) 2021-03-18 JAMSTEC: an attacker posing as staff connected over VPN and stayed in its core network for about a year, leaking 1,949 account records and mail addresses of 8,487 outside people (1) 2021-03-18 Kodama: its ham and food online shop was accessed without authorization, possibly leaking credit card data of 10,219 people over about thirteen months (1) 2021-03-18 Nihon Jimuki: the contact form of its service site was abused to send 483 spam emails (1) 2021-03-17 Nikkei (Hong Kong): six mail accounts left on a default password were taken over, and mail from 1,644 customers was forwarded to outsiders (1) 2021-03-17 ORIX Hotel Management: the December 2019 guest ledger of Cross Hotel Osaka went missing from storage, leaving the data of 9,629 guests unaccounted for (1) 2021-03-16 CROCO: a mail magazine of its writing service desk was sent with another delivery list set as the body, showing 2,752 subscribers' email addresses to 21,757 recipients (1) 2021-03-16 CWS Japan: a mail account unused for about a year was accessed without authorization and used to send English emails with zip attachments to contacts (1) 2021-03-16 JICA: a misconfigured cloud system behind its international career site PARTNER let outsiders view names and birth dates in 8,418 records (1) 2021-03-15 Kyo Tsukimachian: its online shop's payment application was tampered with, possibly leaking 943 credit card records from about two years and four months (1) 2021-03-12 Katsushika Ward: an old mail account unused for over ten years was taken over and used to send unwanted email to 827 unspecified addresses abroad (1) 2021-03-11 Tatsumura Bijutsu Orimono: its online shop's payment module was tampered with, possibly leaking 941 credit card records and 793 login IDs and passwords (1) 2021-03-10 Bioengineering Lab: an employee mail account with a weak password was taken over and used to send spam, and about 2,500 received emails may have leaked (1) 2021-03-10 URBAN RESEARCH: its official online store was accessed without authorization, and names, addresses and birth dates of 317,326 UR CLUB members may have leaked (1) 2021-03-08 SMBC Trust Bank and SMBC Nikko Securities: a permission error in their cloud account-opening systems left data of up to 118,764 people viewable from outside (2) 2021-03-05 Shinsei Financial: 36 members of its Lake ALSA card loan service were logged into without authorization, and 23 suffered fraud such as illegal ATM withdrawals (1) 2021-03-05 JAL and ANA: a passenger system of SITA, used by other alliance airlines, was attacked, leaking names and member numbers of about 920,000 and 1 million mileage members (2) 2021-03-05 Takushoku University: several mail accounts were logged into without authorization and 16 suspicious emails were sent to outside organizations (1) 2021-03-04 SoftBank: a person working at a door-to-door sales agent photographed contract copies to steal 6,347 customer records, and 62 illegal bank withdrawals followed (1) 2021-03-03 INPIT: a support worker's personal PC at its contractor was infected with Emotet, and names and email addresses of 316 contacts may have leaked (1) 2021-03-02 Asahi Shimbun Social Welfare Organization: a third party could access the cloud donor management system, and data on four donors was viewed (1) 2021-03-02 Landbrain: its servers were infected with ransomware and data it held for more than 200 government bodies may have leaked; the investigation found no clear trace of a leak (11) 2021-03-02 Saga City: 986 images sent through the inquiry form of the city website could be viewed by anyone who knew the URL because the contractor did not restrict access (1) 2021-03-01 Kansai TV Hads: its shopping site Kantele Shopping was attacked through a vulnerability, and names and email addresses of 19,297 customers may have been viewed (1) 2021-03-01 Konami Digital Entertainment and Konami Amusement: a misconfigured cloud customer management system let outsiders view email addresses and phone numbers of 35 customers (2) 2021-03-01 Nippon Express: 16 PCs saw unauthorized logins and one was infected with a virus, and mail on two was viewed, but no trace of a leak was found (1) 2021-02-26 Hoyu: an access-permission misconfiguration in its cloud customer management system let outsiders reach its customer service data, and the data of one person leaked (1) 2021-02-26 Japan Fair Trade Commission: a survey summary was emailed to two organizations and one business with the source spreadsheet still embedded in its charts, exposing data on 1,381 people (1) 2021-02-26 NTT DATA Mathematical Systems: a list of 10,000 customers was attached by mistake to an event email, sending names and email addresses to 2,000 recipients (1) 2021-02-25 Shin Nihon Kinou Shokuhin: unauthorized access to its wholesale site Kenko Oroshi.com may have leaked card data of 224 customers (1) 2021-02-24 Panasonic Health Insurance Association, Matsushita Memorial Hospital: a laptop used for X-ray imaging went missing, with imaging data of 1,971 patients on it (1) 2021-02-22 AEON Bank: a settings flaw in the cloud system behind its visit reservation and online consultation service let a third party view names and more of 2,062 customers (1) 2021-02-19 Green Forest: unauthorized access to its two pet food sites may have leaked card data of 417 customers (1) 2021-02-17 hues: an unauthorized access to its menswear shop HUES ONLINE may have leaked card data of 536 customers (1) 2021-02-17 Maebashi City Machizukuri Kosha: a USB memory with 732 records including My Number of staff and others went missing (1) 2021-02-16 Kyoei Steel: a server was accessed without authorization; no customer data leaked, but user ID data of group employees and others may have (1) 2021-02-15 Hokkoku Management: its online mall COREZO was accessed without authorization, and data of 73 customers in the order database may have been viewed (1) 2021-02-12 Hakuto: a server was accessed without authorization; backup data of its core system was hit, likely through a VPN product flaw, with no trace of leakage (1) 2021-02-12 Mynavi: a password list attack hit its job site Mynavi Tenshoku, and the web résumés of 212,816 users may have been viewed (1) 2021-02-10 Advantage Risk Management: logs of the inquiry form of its employee assistance service Advantage EAP could be viewed from outside through a specific URL, covering 12,019 people (1) 2021-02-10 freee: a permission flaw in its Salesforce-based inquiry forms left 2,898 inquiries open to outsiders for over a year (1) 2021-02-10 Ryobi Systems: a permission error in its resident apps and emergency call system for local governments led to confirmed outside access at 13 of the 71 bodies using them (6) 2021-02-09 LINE: a password list attack hit the login page of its inquiry form, and phone numbers, user identifiers and mail addresses could be obtained for 3,035 accounts (1) 2021-02-09 Yokohama City: files of its waste sorting chatbot Eo were tampered with, redirecting users to a suspicious site imitating a shopping site (2) 2021-02-08 Nasu Rusk Terrace: the payment application of its online shop was tampered with, and 203 sets of card data may have leaked (1) 2021-01-30 Tokyo Gas: the website of its dating game Furo-koi was accessed without authorization, and mail addresses and nicknames of 10,365 web members leaked (1) 2021-01-29 Bandai: a misconfigured cloud sales management system at its customer center may have let outsiders see data of 147 customers (2) 2021-01-29 JAIST: a misused security terminal sent files to a virus-scanning service, leaving data of 1,725 faculty members and students visible to outsiders (1) 2021-01-28 Itabashi Medical Association: two mail accounts were accessed without authorization and sent a flood of spam (1) 2021-01-27 Saitama Prefecture: the names of 191 COVID-19 patients were posted on the prefecture's website by mistake for about five hours (1) 2021-01-26 Kyoto University: a configuration mistake in the authentication system for staff and students left the names, mail addresses, IDs and hashed passwords of 40,751 people viewable from outside (1) 2021-01-26 System Five: the payment processing program of its online shop was tampered with, and card data of up to 3,812 customers may have leaked (1) 2021-01-25 Sumitomo Mitsui Construction: a flaw in a contractor's external backup server let a third party view site data, some of it holding contacts' names and mail addresses (1) 2021-01-25 Jinseisha: a USB memory stick holding the names and health conditions of 1,100 emergency patients went missing at Edogawa Hospital (1) 2021-01-25 Fujisawa Machizukuri Association: the website of the Nagakubo Park botanical garden it runs was abused to send about 6,500 emails abroad (1) 2021-01-25 Wakayama City: a public health center sent meeting materials with the names and ages of 414 COVID-19 patients to an unrelated person by mistyping an address (1) 2021-01-21 JNTO: a settings flaw in an outside cloud information system left 49,774 items on supporting organizations, members and contacts open to third parties (1) 2021-01-21 Seiou-kai: a PC holding about 2,600 records of people who booked health checkups at the Uguisudani Health Checkup Center was lost during an office move (1) 2021-01-19 Kakiyasu Honten: the payment application of its online shop was tampered with, and card data of 1,293 customers may have leaked (1) 2021-01-19 Shizuoka City: one mail account of Shizuoka Municipal Hospital was accessed without authorization and sent a flood of spam (1) 2021-01-18 IVY C.S.: the Tokyo Woman's Christian University Co-op Web Shop may have been accessed without authorization, exposing up to 944 personal records and up to 162 cards, plus up to 50 cards on IVYCS FEE PAYMENT (1) 2021-01-18 Marubeni Power & Infrastructure Systems: a file server was accessed without authorization, and My Number data of 132 people and passport numbers of 241 business contacts may have leaked (1) 2021-01-18 The Shimane Bank: seven optical discs recording transactions at seven ATMs went missing, holding katakana names and account numbers for 28,553 accounts (1) 2021-01-15 Fukuchiyama City: one mail account of its fire department was accessed without authorization, and a flood of spam delayed the department's outgoing mail (1) 2021-01-15 Ota Hanaki: its portal site for business partners was tampered with and used to send about 3,500 spam messages (1) 2021-01-14 National Center for Child Health and Development: unauthorized access to its pediatric medical information collection system, which was taken offline (1) 2021-01-12 Matsuyama City: someone logged into the sports information site Sporting City Matsuyama.com with an administrator ID and password, posted without permission and viewed the contact details of 20 people (1) 2021-01-06 Fukuoka Prefecture: a list of about 9,500 people who tested positive for COVID-19 became openable by anyone on the cloud service used to share it, and leaked (1) 2021-01-05 Ehime University: two faculty mail accounts were abused to send about 35,000 spam messages (1) 2021-01-05 Imagineer: the management server of the Rilakkuma fan site Itsudemo Rilakkuma was accessed without authorization, and 105,180 mail addresses of free members leaked (1) 2020-12-28 Kawasaki Heavy Industries: attackers reached servers in Japan through overseas sites, and data of unknown content may have been sent out (1) 2020-12-25 Rakuten Group: a setting error in an outside sales management cloud left up to about 1.49 million records open for nearly five years, and access from overseas was confirmed (3) 2020-12-24 New Memphis: intrusion into the MEMPHIS STORE online shop may have leaked credit card data of 211 customers (1) 2020-12-23 Airport Facilities: its website was accessed without permission and unauthorized files were placed on the web server (1) 2020-12-23 ANTRAC: intrusion into the PC parts shop OVERCLOCK WORKS may have leaked credit card data of 714 customers (1) 2020-12-23 TIMERS: the server of the family album app Famm was accessed without authorization, and a user table of up to 1.43 million entries was pulled out, including up to 535,015 mail addresses and hashed passwords (1) 2020-12-16 Dental Diamond: intrusion into its website shop may have leaked credit card data of 690 customers (1) 2020-12-15 JAOS: intrusion into the JAOS online shop may have leaked credit card data of 368 customers (1) 2020-12-11 AMED: unauthorized access to a maintenance terminal of its HR system may have leaked personal data of about 1,400 staff and former staff (1) 2020-12-11 Eki Rent-A-Car System: intrusion into its website leaked 253,979 mail addresses of customers who booked through Rail & Rent-A-Car (1) 2020-12-11 Mitsubishi Power: attackers entered through a managed service provider and took IT data such as server settings and account details (1) 2020-12-10 Nulab: a password list attack on Nulab accounts for Backlog, Cacoo and Typetalk made about 100,000 attempts and logged in to about 760 accounts (1) 2020-12-10 Sapporo City Transportation Bureau: its official Twitter account was accessed without permission and used to post an unrelated game link (1) 2020-12-09 Osaka University: the reservation system for its on-campus lodgings was accessed without authorization and its database erased; no trace of a leak of data of 43,213 users was found (1) 2020-12-08 LDH JAPAN: the payment program of its EXILE TRIBE STATION ONLINE SHOP was tampered with, and card data of 44,663 people may have leaked (1) 2020-12-08 Lifecard: unauthorized access to the V-Preca prepaid card app led the company to suspend the app (1) 2020-12-07 PayPay: a permission misconfiguration on a merchant management server left merchant, agent and staff data open to access (up to 2,101 records) (1) 2020-12-05 Nagasaki City: the Nagasaki atomic bomb memory portal was tampered with, showing unrelated English text and a link to malware (1) 2020-12-04 Hitachi Systems: unauthorized access to its IT operations monitoring service, with no customer data leak confirmed (1) 2020-12-04 ORIX Hotel Management: an old server of the Hundred Stay Tokyo Shinjuku hotel went missing, and about 209,000 customer records may have been taken out (1) 2020-12-04 Tokyu Recreation: a mail account password was stolen and abused, and suspicious mail was sent to customers under the 109 Cinemas name (1) 2020-12-03 LINE: double-stuck address labels on membership gifts for Disney x LINE exposed the names and addresses of 2,608 customers to other customers (1) 2020-12-02 Fukushima Medical University: hospital devices caught a WannaCry variant in 2017, and two scans had to be retaken after imaging devices rebooted (1) 2020-11-30 Ilovex: custom-made ransomware encrypted PCs and the file server, and the firm checked whether customers' program assets had leaked (1) 2020-11-30 Kousoku Offset: the sales site for a Yuzuru Hanyu calendar was broken into, and card data of 1,469 buyers may have leaked (1) 2020-11-30 Panasonic System Solutions Japan: about 4,300 login credentials for its partner member site leaked, and about 4,000 matched real members (1) 2020-11-30 Showa University Hospital: a USB drive with a billing list of 149,335 patients was lost in an office (1) 2020-11-27 MHLW: a backup medium from an old Hello Work server was lost, with data on 352 job seekers and others (1) 2020-11-25 Japan Post: ledgers of investment trust and bond trades are missing at four post offices, with data on 318 customers (1) 2020-11-25 Mikazuki: its online shop was broken into, and up to 464 card records may have leaked (1) 2020-11-24 Asian Bridge: the mail magazine system of a Fukuoka curry restaurant was broken into, and data of 27,944 members leaked (1) 2020-11-24 Kawasaki City: a COVID-19 patient list for 2,515 people was posted with non-public fields (1) 2020-11-20 Mitsubishi Electric: unauthorized access to a cloud service leaked bank account details of 8,635 domestic suppliers (1) 2020-11-19 Tokyo Metropolitan Government: a teacher at a metropolitan high school copied entrance exam data to SD cards without permission, leaving data on 4,697 applicants unaccounted for (1) 2020-11-18 EverySing Japan: the developer of the EverySing karaoke app was broken into, and data of 707 members leaked (1) 2020-11-18 QUOINE: the domain registration of the Liquid crypto exchange was altered, 169,782 customer records leaked and 28,639 ID documents may have been accessed (1) 2020-11-18 Reform Sangyo Shimbun: the Reform Books site was broken into, and 1,944 card records may have leaked (1) 2020-11-17 Peatix Japan: an intrusion into the Peatix event service leaked data on up to 6.77 million members (1) 2020-11-17 Token Corporation: an intrusion into a group server may have leaked up to 657,096 member records (1) 2020-11-16 Shogakukan Publishing Service: BOOK SHOP Shogakukan was broken into, and card data of 1,036 Gravure Club payments may have leaked (1) 2020-11-13 Saito City: data on the city website was deleted and a ransom note left, and 973 contact form entries may have leaked (1) 2020-11-13 KKR: unauthorized access to the Toranomon Hospital website made it and the sites of related clinics unreachable (1) 2020-11-11 Asahi Intecc: a ransomware attack disrupted group mail and file servers (1) 2020-11-11 LesPros Entertainment: its official online shop was broken into, and card data of 4,722 customers may have leaked (1) 2020-11-10 Maple: four online shops, including acupuncture and medical supply sites, were broken into, and 1,147 card records may have leaked (1) 2020-11-09 Kaneshime Matsuda Suisan: the payment app of the Tarakoya Kojohama cod roe shop was tampered with, and 811 card records leaked (1) 2020-11-06 Dinos Cecile: a list attack on the Cecile online shop made 33 login attempts, and one succeeded (1) 2020-11-05 EBI: the Tokyo noble* online shop for umbrellas was broken into, and card data of 549 customers leaked (1) 2020-11-04 ALL CONNECT: inquiry customer data in the cloud was accessed without authorization, and 14,955 records of three group companies leaked (3) 2020-11-04 Capcom: a Ragnar Locker ransomware attack encrypted internal systems and leaked personal data of 15,649 people (1) 2020-10-30 Kansai Medical University: staff PCs were infected with Emotet and mail posing as staff was sent from outside servers (1) 2020-10-29 Good Life Company: a mail account was broken into and used to send spam (1) 2020-10-29 Jomo Shimbun: mail addresses and passwords of 5,415 members of the Jomodachi readers club leaked, and members got mail demanding money (1) 2020-10-29 Lifie: an intrusion into its insurance comparison site system may have leaked up to 88,564 customer records (1) 2020-10-28 Daiichi Insatsusho: an intrusion into a server may have leaked data (1) 2020-10-27 Nuclear Regulation Authority: attackers used a known VPN flaw to break into its office network and stole over 250 staff credentials (1) 2020-10-26 GMO CLICK Securities: a customer account was logged into, its withdrawal account changed, and 1.49 million yen taken (1) 2020-10-23 Repro: its owned media site Growth Hack Journal was altered, with unknown articles and categories added (1) 2020-10-23 Sinfonia Technology: one PC in the company was infected with Emotet (1) 2020-10-22 Hokuto Bank: a CD-R with ATM records from a merged branch was lost, including account numbers and balances of 3,977 customers (1) 2020-10-22 Shin-ei: a PC at the security camera maker was infected with Emotet, leaking addresses and mail text of customers and partners (1) 2020-10-20 Hiramatsu: two employee PCs were infected with Emotet, leaking mail with personal data of up to 2,800 people including online shop and meal voucher customers (1) 2020-10-20 Qualitia: a product development contractor left 1,292 support mails viewable by anyone on an outside online service (1) 2020-10-20 Toba: employee PCs were infected with Emotet, and mail with encrypted zip files posing as staff went out (1) 2020-10-20 White Plus: intrusion into the server of the house cleaning matching site Kirehapi may have exposed 9,480 customer records (1) 2020-10-16 Japan Association for the 2025 World Exposition: one hijacked mail account sent about 63,000 phishing mails abroad (1) 2020-10-16 Kyocera: an employee PC was infected with Emotet, and 3,500 mails with data on home solar customers and others may have leaked (1) 2020-10-15 Kasetsusha: the Kasetusya ONLINE SHOP was tampered with, and 1,128 card records may have leaked (1) 2020-10-15 Resona Bank: an MO disk holding names and addresses of 14,561 customers went missing (1) 2020-10-14 Tsunagu Network Communications: malicious links were planted in articles of the condominium site Mansion Lab (1) 2020-10-13 Kasama City: the server for its staff emergency call-out mailing list had relayed spam since around May (1) 2020-10-13 TEPCO Energy Partner: a password list attack on the Kurashi TEPCO web member site may have led to 260 unauthorized logins (1) 2020-10-09 HJ Holdings: password list attacks on the Hulu streaming service led to 798 unauthorized logins (1) 2020-10-09 Tekken: ransomware encrypted over 90% of its servers, and stolen data appeared on an outside site (1) 2020-10-08 Okayama University: a mail account on a cloud server for a lab website was hijacked and sent 14,666 phishing mails (1) 2020-10-07 IVY C.S.: a fake payment form on the Aoyama Gakuin store online shop may have exposed card data of 519 people and up to 7,808 customer records (1) 2020-10-01 Kansai Television: a USB stick holding 2,491 viewer gift applicants went missing at a production contractor (2) 2020-10-01 Keio University: intrusion into Shonan Fujisawa Campus systems may have leaked 18,636 student photos and more, delaying the start of classes by a week (1) 2020-09-30 Daiwabo Advance: an employee typed a mail password into a phishing site, and data of over 500 online customers may have been read (1) 2020-09-30 Toei Video: an intrusion into the Toei Video online shop may have leaked card data of 10,021 customers (1) 2020-09-29 Gunma Tourism Association: the payment page of the CASA Gunma online shop was tampered with, and card data of 651 customers may have leaked (1) 2020-09-29 Skytop Trading: the payment code of the CELL CELLAR official shop was altered, and customers' card data may have leaked (1) 2020-09-28 Bellpark: ransomware encrypted a cloud system for shop leases, and data on 1,115 landlords, including bank accounts, may have leaked (1) 2020-09-28 Kita-Osaka Kyuko Railway: its website's COVID-19 notice page was defaced with a link to an online casino ad page (1) 2020-09-28 Sekisui House: some group PCs were infected with Emotet, and mail posing as employees reached past contacts (1) 2020-09-25 NISSEICOM: several office PCs were infected with Emotet, and spoofed mail posing as employees was sent (1) 2020-09-25 Hypersoft: the payment page of its Salon de Net Supply Mall shop for salons was tampered with, and card data of 12 customers may have leaked (1) 2020-09-24 Maruha Nichiro: some company devices were infected with Emotet, and spoofed mail posing as employees was sent (1) 2020-09-24 Sankyo Frontier: Emotet spread from one employee's PC to 36 office PCs, and 43 mail accounts were used for mail posing as staff (1) 2020-09-23 CINRA: a fake payment form on the CINRA.STORE online shop may have stolen card data of 337 customers (1) 2020-09-23 JR Kyushu: a password list attack on its Web member site broke into 1,269 accounts and exchanged points (1) 2020-09-23 Japan Post Bank: logins to the mijica debit card member site may have exposed 1,422 members, and fraudulent transfers took about 3.32 million yen from 54 of them (1) 2020-09-23 Okasan Online Securities: a password list attack on its trading tool logged in to 208 customer accounts (1) 2020-09-18 Construction Engineers Center: an office PC was infected with Emotet, leaking addresses and mail text of applicants and other contacts (1) 2020-09-18 en Japan: an employee's PC was infected with Emotet, and suspicious mail using staff and site names went to customers (1) 2020-09-18 Gunma Prefectural Council of Social Welfare: Emotet on a staff PC may have leaked 468 personal records and 370 email addresses (1) 2020-09-18 Itoham Yonekyu Holdings: a group PC was likely infected with Emotet, and suspicious mail went to people who had exchanged mail with the group (1) 2020-09-17 LINE: a password list attack on LINE Login confirmed that about 74,000 IDs and passwords were valid (1) 2020-09-17 Nippon Kanzai: one employee's PC was infected with Emotet, and about 6,400 suspicious mails posing as staff were sent before it was stopped (1) 2020-09-17 Wellnet: impostors topped up the Shiharai Hisho payment app from 35 bank accounts, and about 2.7 million yen may have been spent (1) 2020-09-16 Higashimatsuyama City Council of Social Welfare: a mail account was taken over and used to send spam (1) 2020-09-16 Kyash: accounts opened in other people's names were linked to their bank accounts and topped up from Japan Post Bank and AEON Bank (1) 2020-09-16 Mitani Corporation: several employees' PCs were infected with Emotet, and their mail accounts were used to send mail posing as staff (1) 2020-09-16 SBI Securities: intruders got into 6 customer accounts, sold their securities and withdrew 98.64 million yen to fake bank accounts (1) 2020-09-15 Miyazaki Hideji Beer: a fake card entry screen on the Hideji Beer online shop may have leaked card data of 1,181 customers (1) 2020-09-15 Japan Post Bank: money was taken from accounts through 6 linked payment services, with about 380 reported cases since 2017 (1) 2020-09-14 Hakata Marukita Suisan: its closed former online shop turned out to have been hacked, and card data of 3,272 customers may have leaked (1) 2020-09-14 JCHO Kani Tono Hospital: a temp worker took home health checkup booking ledgers covering 1,351 people and threw some out as household trash (1) 2020-09-11 Riken Koryo: infection with malware believed to be Emotet led to large volumes of spoofed mail reusing past messages (2) 2020-09-10 NTT DOCOMO: criminals linked other people's bank accounts to docomo Koza wallets and drained deposits at 11 banks (1) 2020-09-09 Japan Medical Association: a secretariat PC was infected with Emotet, and spoofed mail in the names of its contacts was sent (1) 2020-09-04 Adachiya: a fake payment form on the Asakusa Adachiya pet goods shop may have leaked 57 customers' card data (1) 2020-09-02 Iwade Kensetsu: an employee's PC was infected with Emotet, leaking mail addresses and text and sending spoofed mail (1) 2020-09-02 Ryukoku University Co-op: two PCs were infected with what appears to be Emotet, and mail addresses of university staff, students and partners may have leaked (1) 2020-09-02 Yamaichi Shoji: an office PC was infected with what appears to be Emotet, its past mail history leaked, and mail posing as staff reached business partners (1) 2020-09-01 COCO FARM & WINERY: malicious files and suspicious access from abroad were found on the official website, which was shut down (1) 2020-09-01 Kameya Yoshinaga: a staff PC was infected with Emotet, customer data on the mail server leaked, and spoofed mail spread (1) 2020-09-01 Mammy Pro: an intruder hit the Mama Navi parenting site, and a message from someone claiming the attack revealed a member data leak (1) 2020-08-31 Kanazawa University: a teacher's laptop was stolen with a bag on a trip to Switzerland, possibly exposing personal data of students, staff and others (1) 2020-08-28 Comtex: an intrusion into a server may have leaked bank accounts and passwords of about 2,800 online trading applicants (1) 2020-08-28 DAX: an office PC was likely infected with malware, its mail history leaked, and suspicious mail was sent in staff members' names (1) 2020-08-28 giftee: password list attacks broke into 411 giftee accounts, and 32 users were charged for purchases they did not make (1) 2020-08-28 The Westin Osaka: the payment application of the hotel's online shop was altered, and cards of up to 1,039 customers may have leaked (1) 2020-08-27 Fujisawa City: the Oishii Fujisawa-san site run by a contractor was hijacked to send about 13,000 spam messages (2) 2020-08-26 Okayama University: a stolen mail password let outsiders send about 2,000 spam messages (1) 2020-08-25 Hirata Corporation: a flaw in an old VPN device restarted for telework let attackers steal logins of 24 staff, which were then posted online (1) 2020-08-25 Keizai Doyukai: ransomware hit part of the secretariat's systems and caused outages (1) 2020-08-25 RFLocus: pages of the company website were altered and could make visitors download unwanted files (1) 2020-08-21 Biratori Town: signs of an intrusion on the official website made the town shut it for about 20 days (1) 2020-08-21 Daisho: a failure on an IT server was followed by a leak of some internal company data (1) 2020-08-20 ERI: an employee mail account was broken into and used to send spam (1) 2020-08-19 iTEC: an intrusion into the iTEC Store for IT exam materials may have leaked four years of buyers' personal data (1) 2020-08-18 actindi: an intruder got into a test server of the family outing site iko-yo and may have seen some data (1) 2020-08-12 Jimoty: about 10 accounts showed signs of unauthorized access, and all users were asked to change reused passwords (1) 2020-08-11 NetMile: unauthorized access to the point exchange made it stop instant exchanges into e-money and similar rewards (1) 2020-08-11 S Point: about 10 million login attempts on the member site broke into 1,094 accounts (3) 2020-08-07 Japan Arts Council: an intrusion into its website leaked 54,445 addresses of National Theatre newsletter subscribers (1) 2020-08-07 Mitsubishi Heavy Industries: a laptop infected through social media while working from home let attackers into the Nagoya network and leak staff data (1) 2020-08-06 Isetan Mitsukoshi: password list attacks on its online store and the MI Card site may have exposed data of about 54,000 people (2) 2020-08-06 Kansai Electric: a password list attack on its Hapi e Miruden member site exposed the names and addresses of 5 users (1) 2020-08-06 Yahoo Japan: a bug in Yahoo! JAPAN ID wrote users' profile edits into up to 387,460 other people's IDs (1) 2020-08-05 LINK-J: a staff mail account was misused to send phishing mail to 1,733 contacts (1) 2020-08-05 Shiseido Japan: an intruder got into the official Clé de Peau Beauté Instagram account, which was closed for a while (1) 2020-08-04 Japan Marine Equipment Inspection Association: an attack that looks like REvil ransomware took down all systems, mail included (1) 2020-08-03 Luxottica Japan: after a break-in to a mail account, the OAKLEY Instagram account in Japan was taken over (1) 2020-07-31 Sumaizukuri Navi Center: a mail account of the Reform Hyoka Navi site was taken over and used to send spam (1) 2020-07-30 Kitamura Japan: an intrusion into its pillow shop may have leaked 44 cards and data of 5,589 registered customers (1) 2020-07-29 AQURA HOME: an intrusion into the JAHBnet builder matching site may have leaked customer data, including income (1) 2020-07-29 Yokohama Toyopet: Emotet infected 12 PCs, leaking contacts and mail text and sending floods of spoofed mail (1) 2020-07-28 Kagafu Fumuroya: an office PC was infected with Emotet and part of its past mail history leaked (1) 2020-07-24 KitchHike: member data of its dining app leaked, up to 116,863 users (1) 2020-07-22 Eco Project Cooperative: intruders used seven of its mail accounts to send spam, mostly to US addresses (1) 2020-07-22 PERSOL Process & Technology: the MITERAS mail server was abused to send about 250,000 spam mails (1) 2020-07-22 Niigata Prefecture: construction drawings published in its bid information service showed the names of 16,561 landowners and contractor staff (1) 2020-07-22 Jupiter Shop Channel: credential stuffing on the Shop Channel site got into 264 accounts (1) 2020-07-21 Mizuho Research Institute: six backup tapes holding about 2.5 million customer and usage records went missing (2) 2020-07-21 TATRAS INTERNATIONAL: an intrusion into its old online shop strada-est may have leaked payment cards (1) 2020-07-17 Enjin: an intrusion into its forestry machinery shop ENGINE may have leaked 932 payment cards (1) 2020-07-16 Johnan Shingaku Kenkyusha: an attack on the server behind its cram school sites may have leaked 34,263 enquiry records (1) 2020-07-16 Saxo Bank Securities: an attack on the server of an outsourced deposit tool leaked data of 38,000 customers, with 378 My Numbers (1) 2020-07-15 Cycle Sports Management: an intruder took mail from its internal network and sent it to another party (1) 2020-07-15 TMW: a die maker supplying Toyota and others was hit by ransomware, and data appears to have been stolen (1) 2020-07-14 Isejin Honsha: an intruder used one of its mail accounts to send spam (1) 2020-07-13 Asuka: an SQL injection on its job site exposed up to 30,000 provisional registrants on an online forum (1) 2020-07-13 Shimada Seishoku: an intrusion into the hatsutoki ONLINE STORE may have leaked the cards of 138 customers (1) 2020-07-10 Kawasaki City: login attempts on the Fureai Net booking system made the city stop baseball field bookings (1) 2020-07-01 Kunihiro: an intrusion into its oyster shop Kaki no Kunihiro may have leaked the cards of 491 customers (1) 2020-06-30 Ace Sangyo Kiki: the payment application of its Douguyasan Honten shop was altered, and cards of 82 customers may have leaked (1) 2020-06-29 Shizuoka Railway: the Shizutetsu train website was altered and could send visitors to a malicious site (1) 2020-06-17 Niku no Mitakeya: an intrusion into its online shop may have leaked 530 payment cards (1) 2020-06-15 Kitamura: credential stuffing on the Camera no Kitamura net shop got into about 400,000 accounts (1) 2020-06-12 JICE: intruders took email addresses and passwords of 1,984 people from the portal of a JICA study program (2) 2020-06-11 RT Corporation: an intruder changed its website settings and sent visitors to an outside site (1) 2020-06-10 Next Mobility: a service email sent with addresses in CC exposed 1,350 customers' email addresses (1) 2020-06-09 Honda: a cyberattack took down internal systems and stopped production at overseas plants, including in the US (1) 2020-06-09 Yokohama Chinatown Development Association: its mail account was abused to send spam (1) 2020-06-02 GMO Internet: a flaw in Onamae.com Navi let attackers rewrite the domain settings of Coincheck and bitbank (3) 2020-05-28 Keidanren Jigyo Service: a rewritten site program may have leaked about 500 seminar and book orders (1) 2020-05-28 NTT Communications: intruders came in through its Singapore base and may have taken work data on business customers (1) 2020-05-26 KREO: unauthorized logins to the survey site Naruhodo MC.net, with points exchanged fraudulently (1) 2020-05-24 LINE: a mass login attempt on livedoor ID got into some accounts (1) 2020-05-21 Funabashi City: the auto-reply of its contact form was abused to send about 120,000 spam emails (1) 2020-05-20 CYBIRD: an email to 2,015 Detective Conan quiz applicants showed everyone's addresses (1) 2020-05-20 Kochi Association of Speech-Language-Hearing Therapists: a rewritten site program sent visitors to unrelated pages (1) 2020-05-20 MHLW: the online application system for employment adjustment subsidies stopped on day one after showing other applicants' details (1) 2020-05-18 Magfine: a fake payment form on its magnet shop may have leaked 178 cards from 2018 (1) 2020-05-13 Mouse Computer: a phished staff mailbox sent fake emails to 1,220 business customers and partners (1) 2020-05-13 Yamaguchi Prefectural Industrial Technology Institute: a four-year-old setup error let spammers relay mail through its server (1) 2020-05-12 Nikkei: malware from an email attachment leaked data of 12,514 staff and others (1) 2020-05-10 GAIN Capital Japan: an intrusion into the network behind FOREX.com may have exposed customer data (1) 2020-05-08 I-O DATA: attackers got into a NarSuS test server and took about 60,000 user records (1) 2020-05-07 Valuence Japan: an auction listing email carried the names of 1,872 customers who sold bags (1) 2020-05-05 Aichi Prefecture: names and hospitals of 495 COVID-19 patients were posted on its website by mistake (1) 2020-05-04 Tottori City: three intrusions into the Tottori-ichi online shop leaked 59,021 orders and member passwords (1) 2020-05-01 Hiroshima City Rehabilitation Hospital: a private USB stick with prescriptions of 101 inpatients was lost (1) 2020-05-01 Kawasaki City: ransomware hit the school server of Tachibana High School for the second time in half a year (1) 2020-05-01 SMBC: its maintenance contractor lost two hard disks holding about 70,000 Kasai branch transactions (2) 2020-04-27 Miyoshi Town Council of Social Welfare: a hijacked mail account sent large numbers of English scam emails (1) 2020-04-25 Japanese Association of Certified Orthoptists: members-only lists of 1,631 people showed up in search engines (1) 2020-04-24 Nintendo: credential stuffing on Nintendo Network IDs led to logins on about 300,000 accounts (1) 2020-04-22 Renaissance: a bulk mail to instructors showed recipients' addresses, exposing 2,650 email addresses (1) 2020-04-21 JCCA: an overseas site claimed about 72,000 of its members' records, and the association stopped its systems (1) 2020-04-19 Rejob: intruders reached a test server of the job site Rejob, leaking up to 206,991 job seekers' records (1) 2020-04-18 Yama-Kei Publishers: data of 29,431 early Yamakei Online members was traded on the dark web (1) 2020-04-16 Square Enix: a DDoS attack made FINAL FANTASY XIV's Japan data center hard to reach for about three hours (1) 2020-04-16 Kogensha: SQL injection on its website may have leaked members' names, addresses and contact details (1) 2020-04-14 Seibu Railway: it detected unauthorized access to its line information site GRUTTO PLUS, took the site offline, and reopened it about a year later with stronger security (1) 2020-04-13 Classi: attackers used credentials phished from a developer to break into the school platform and leak the IDs and encrypted passwords of all 1.22 million users (1) 2020-04-13 Nakabayashi: SQL injection on the Fuel Mall online shop put up to 120,000 customer records and 94 cards at risk (1) 2020-04-13 TEPCO Holdings: a contractor sent radiation dose data of 6,053 Fukushima Daiichi workers to the wrong companies (1) 2020-04-09 Hokkaido Cultural Broadcasting: an external hard disk with 6,727 film preview applicants went missing (1) 2020-04-07 CyberAgent: a misused cloud access key left data of 1,027 Ameba ad users open to the internet for a time (1) 2020-04-06 Zao Dairy Center: a fake payment form on the Zao Cheese Online Shop may have exposed the cards of 268 customers (1) 2020-04-01 Sony Music Marketing: signs of tampering took the Sony Music official site offline for six days (1) 2020-03-27 Ryuki Design: intruders reached the database server of ECTOOL, a tool for online shops, and altered some data (1) 2020-03-26 Doshin Service Center: a contractor's engineer left code and client data, including 15,599 personal records, public on GitHub for four months (1) 2020-03-25 Asobimo: credential stuffing against Toram Online led to logins to Asobimo accounts (1) 2020-03-24 Step: payment module of the SteP SPORTS Online Shop altered, data of 63 cards at risk (1) 2020-03-24 Nakanishi Metal Works: a phishing email put the nicknames and email addresses of Tour Master members at risk (1) 2020-03-19 Soft On Demand: the SOD Prime video service showed other members' account data, for up to 68,898 people (1) 2020-03-18 Fukuyama city: an unknown post on the city's official Twitter account, possibly through unauthorized access (1) 2020-03-13 Kagoshima University: intruders logged into its Faculty of Education website and altered the site map page (1) 2020-03-12 Minamiboso City Tourism Association: prize emails for a Minamiboso city coupon draw carried a list of 1,577 entrants (2) 2020-03-07 Kamada Shoyu: break-in at its business sales site leaked 5,787 customer records, including login passwords (1) 2020-03-06 Kanden Amenix: an employee's PC caught Emotet, putting 448 internal and external email addresses at risk (1) 2020-03-04 BOOKOFF: an email to BOOKOFF Online members carried a file listing 1,309 members' email addresses (1) 2020-03-04 National Institute of Infectious Diseases: an old server left in place was broken into and used to post to an outside forum (1) 2020-03-04 Five Gate: logins by others on the Point Income rewards site, with points exchanged by third parties (1) 2020-03-04 S-Collection: intruders reached the server of its e-pledge service and downloaded the personal data of signers since 2016 (1) 2020-03-04 Tapioca Express: payment module of its Tapioca Express online shop altered, data of 623 cards at risk (1) 2020-03-03 JR East: credential stuffing through the Ekinet app logged into 3,729 member accounts (1) 2020-03-02 Nihon Securities Journal: a rogue article from outside appeared on Nihon Securities Journal Digital for about six hours (1) 2020-02-28 Okayama University: a lecturer's mail account was hijacked and sent about 1.5 million spam emails (1) 2020-02-28 Sapporo Gakuin University: a list of 2,524 students sat open on its web server for over three years (1) 2020-02-27 Hobbys Factory: 63,587 member IDs, passwords and email addresses leaked from Card Shop BIGWEB (1) 2020-02-26 Koisuru Buta Laboratory: intrusion into its net store puts data of 286 cards at risk (1) 2020-02-26 LINE: 4,225 accounts logged into by others and used to post spam and phishing links (1) 2020-02-25 Fiore: intrusion into the Sekai no Wine Budouya wine shop puts data of 658 cards at risk (1) 2020-02-25 Toyota Finance: unauthorized logins to its TS CUBIC CARD Mall member site (1) 2020-02-18 Ichimasa Kamaboko: payment module of the Ichimasa Online Shop altered, data of 303 cards at risk (1) 2020-02-18 Keiyo: home center website defaced to send visitors to another site (1) 2020-02-17 12:50 Dwango: floods of traffic against niconico force emergency maintenance and outages (1) 2020-02-14 Japan Post: unauthorized access to one of its mail domains sent about 4,000 unwanted emails (1) 2020-02-10 Like Academy: intrusion into a contractor's test system for the Nanapocke app puts data of children and parents at risk (1) 2020-02-07 16:00 Newscom: the mail account of the Hechima culture venue was taken over and sent mass spam (1) 2020-02-07 Nagaoka University of Technology: a lecturer's mail account broken into and used to send 66,482 spam emails (1) 2020-02-06 18:04 Kobe Steel: intruders in its network reached 250 files with defense-related and personal data (1) 2020-02-06 18:04 Pasco: intrusion into its network, with traces going back to around 2016 (1) 2020-02-05 Kyushu Electric Power: network fee bills went to the wrong electricity retailer, leaking data of 3,522 customers (1) 2020-02-05 Tokyo University of Agriculture and Technology: two staff mail accounts broken into, personal data leaked and phishing sent (1) 2020-02-03 Kawamoto Pump: an employee's PC infected with Emotet, email addresses and messages leaked (1) 2020-02-03 Infinity: card data may have leaked from the MUSASHI Official Online Shop (1) 2020-01-31 NEC: unauthorized access to a server of its defense division (1) 2020-01-31 Saitama Sewerage Public Corporation: mail server breached and used to send suspicious mail (1) 2020-01-28 Ochanomizu University: a lab server with a weak password sent about 3.09 million phishing emails (1) 2020-01-27 Resorttrust: misaddressed email leaks 27,763 records of members' facility use (1) 2020-01-25 SoftBank: former employee arrested for taking internal documents out of the company (1) 2020-01-24 Chiba University: a student's email account was hijacked and sent about 20,000 spam emails (1) 2020-01-24 My Pearl Nagano: Emotet on a staff PC sends spoofed mails to business partners (1) 2020-01-23 Smaregi: intrusion into its Store Store online shop leaks members' email addresses (1) 2020-01-20 Gifu Shimbun: Emotet on an office PC sends spoofed mails to business partners (1) 2020-01-20 Life: malware on an office PC leaks mail history and sends spoofed mails (1) 2020-01-20 Mitsubishi Electric: intruders used an unknown flaw in antivirus servers, personal data and business secrets at risk (1) 2020-01-17 Fukuchiyama City Hospital: a hijacked email account sent large amounts of spam (1) 2020-01-16 Tokyo Kikaku: hijacked email account sent spam exposing 9,958 customer addresses (1) 2020-01-15 Dirt Freak: intrusion into the Dirt Bike Plus online store puts card data at risk (1) 2020-01-15 Pet Hug: payment page of its online shop tampered with, data of 4,098 cards at risk (1) 2020-01-14 Ebara: a maintenance contractor's PC was taken over, 1,720 customer records at risk (1) 2020-01-10 Hard Off: credential stuffing on the Hard Off Net Mall logs into 149 accounts (1) 2020-01-10 Showa University Hospital: laptop and external drive with 1,300 patients' data lost outside the hospital (1) 2020-01-09 Eight: intrusion into the Junoesque Bagel online shop puts card data at risk (1) 2020-01-08 08:00 Morioka Hachimangu: website defaced to send visitors elsewhere (1) 2020-01-07 Gendai Guitar: intrusion into the GG Internet Shop puts card and customer data at risk (1) 2020-01-06 SIOS: a malicious file planted through a site upload page closed the group's websites for two weeks (2)
Prefecture Any Aichi Akita Aomori Chiba Ehime Fukui Fukuoka Fukushima Gifu Gunma Hiroshima Hokkaido Hyogo Ibaraki Ishikawa Iwate Kagawa Kagoshima Kanagawa Kochi Kumamoto Kyoto Mie Miyagi Miyazaki Nagano Nagasaki Nara Niigata Oita Okayama Okinawa Osaka Saga Saitama Shiga Shimane Shizuoka Tochigi Tokushima Tokyo Tottori Toyama Wakayama Yamagata Yamaguchi Yamanashi
Municipality Choose a prefecture first
Industry/type Any Agriculture and forestry (2) Mining and quarrying (1) Construction (17) Manufacturing (305) Electricity, gas, heat and water (33) Information and communications (395) Transport and postal services (77) Wholesale and retail trade (333) Finance and insurance (207) Real estate and rental (46) Scientific research, professional and technical services (55) Accommodation, food and drink (45) Personal services and entertainment (63) Education and learning support (134) Medical care and welfare (52) Compound services (2) Other services (78) National government (21) Prefecture (46) Municipality (312) Police (15) Public agency or corporation (29)
Organization kind Any Company Government Hospital Education Nonprofit
Employees Any Under 100 100–999 1,000–9,999 10,000 or more
Clear filters