Japan cyberattack database
JapanHacked is a database of cyberattacks and data leaks that hit organizations in Japan. Each incident lists the organizations affected, how the attack worked, how many records leaked and when it was disclosed, with official notices and news reports as sources.
Spotlight
GMO Internet: Onamae.com Desktop Cloud intrusion
Data leaked or at risk: Passwords
Servers affected or at risk: 26,739
Other harm: Service outage, Fraud, Extortion, Financial loss
Also involved:[Through a supplier] AvaTrade Japan K.K., Dukascopy Japan K.K., Gaitame Finest Co., Ltd.1 more
Adventure: unauthorized access to skyticket servers
Data leaked or at risk: 14.6M records
Includes: Name, Date of birth, E-mail address, Phone number, Postal address, Passwords, Payment card, Bank account
Club Tourism: online booking system intrusion
Data leaked or at risk: 4.3M records
Includes: Name, Nationality, Gender, Date of birth, Postal address, Phone number, E-mail address, Member or customer ID, Emergency contact
Other harm: Service outage
Japan Airlines, All Nippon Airways and others: Amadeus supplier intrusion
Data leaked or at risk: 92K records
Includes: Name, E-mail address, Phone number, Passport number, Nationality, Member or customer ID
Also involved:[Through a supplier] Japan Transocean Air Co., Ltd. (JTA), Solaseed Air Inc., Star Flyer Inc.
Rakuten Group: Rakuten Travel booking-site intrusion
Data leaked or at risk: 2.6M records
Includes: Name, E-mail address, Phone number, Payment card, Purchase history
Sony Network Communications: So-net database intrusion
Data leaked or at risk: 2.6M records
Includes: Name, E-mail address, Phone number, Date of birth, Gender, Passwords, Bank account
Also involved:[Through a supplier] NTT DOCOMO, Inc.
php2shell: critical flaws in PHP
Harm: Service outage
Organizations:[Precautionary halt] Hiroshima Prefecture, Ibaraki Prefectural Police, Iwate Prefecture605 more
Ryohin Keikaku: MUJI app intrusion
Data leaked or at risk: 27.3M records
Includes: E-mail address, Date of birth, Gender
Latest disclosures and updates
By date of disclosure or follow-up report, newest first
2026-10-31
[Update][Severity: Critical]Disclosed 2026-10-22Updated 2026-10-31TokyoLeaked 42.9KOrganizations 1
Strategic Marketing: Tokumoni! admin system intrusionNew official notice · Strategic Marketing 当社運営サイト「とくモニ！」における個人情報の漏えいに関するお詫びとお知らせ
[New][Severity: Critical]Disclosed 2026-10-31Updated 2026-10-31TokyoLeaked 1.9KOrganizations 1
Credit Saison: Saison Smart Real Estate Investment contractor platform intrusion[New][Severity: Major]Disclosed 2026-10-31Updated 2026-11-01 12:27Aichi, Osaka, TokyoLeaked 2.7KOrganizations 8
NTT DATA STdirectServices: bond buyer data may have leaked at a contractor[New][Severity: Major]Disclosed 2026-10-31Updated 2026-10-31TokyoOrganizations 2
Securitize Japan: digital securities platform intrusion[New][Severity: Major]Disclosed 2026-10-31Updated 2026-10-31KanagawaOrganizations 1
Life Card: V-Preca contractor system intrusion[New][Severity: Major]Disclosed 2026-10-31Updated 2026-10-31 18:50TokyoOrganizations 1
PhillipCapital Japan: digital securities contractor intrusion[New][Severity: Moderate]Disclosed 2026-10-31Updated 2026-10-31TokyoOrganizations 1
Wave: mail-order email account hijacked to send unwanted messages
2026-10-30
[Update][Severity: Major]Disclosed 2026-09-16Updated 2026-11-01 13:58TokyoLeaked 45KOrganizations 1
GMO GlobalSign: GMO Trust Login customer files open to outside retrievalNew official notice · GMO GlobalSign 【重要】GMOトラスト・ログインにおけるお客様情報の漏えいに関するお詫びとお知らせ（第三報）
[Update][Severity: Critical]Disclosed 2026-10-23Updated 2026-10-30 12:04TokyoOrganizations 1
Good Smile Company: Official Shop intrusionNew official notice · Good Smile Company 不正アクセスによるお客様情報流出の可能性について（第4報）
[Update][Severity: Critical]Disclosed 2026-10-19Updated 2026-10-30 13:18Aichi, Fukuoka, Kanagawa and 3 more prefecturesLeaked 51.6MOrganizations 32
Ymirlink: Cuenote FC mail system intrusionNew official notice · Japan Pharmaceutical Manufacturers Association メール配信委託先における不正アクセスに伴うメールアドレスの 漏えいの可能性に関するお詫びとお知らせ
[Update][Severity: Critical]Disclosed 2026-10-28Updated 2026-10-30 13:18TokyoLeaked 3.4MOrganizations 1
GameTrade: game account marketplace intrusionNew official notice · GameTrade 【第3報】不正アクセスによる情報漏えいの可能性のお知らせとお詫び
[Update][Severity: Critical]Disclosed 2026-10-23Updated 2026-10-30Osaka, TokyoLeaked 3.1MOrganizations 2
Lindt: online shop and app member data stolen from Future ShopNew official notice · Lindt & Sprüngli Japan 委託先事業者への不正アクセスによる個人情報漏えいに関するお詫びとお知らせ
[Update][Severity: Critical]Disclosed 2026-10-29Updated 2026-10-30 13:18Kagoshima, Shizuoka, TokyoLeaked 3MOrganizations 6
Arara: Arara Message mail system intrusionNew official notice · Suzuki 弊社委託先における個人情報漏洩の可能性について
[Update][Severity: Critical]Disclosed 2026-10-29Updated 2026-10-30TokyoLeaked 2.4MOrganizations 1
Matsuya Foods: official app management system intrusion[Unknown][Data leak][Service outage]New official notice · Matsuya Foods Holdings 松屋公式アプリ（松弁ネット・モバイルオーダー・松弁デリバリー）管理システムに対する第三者からの不正アクセスによる個人情報漏えいに関するお詫びとお知らせ
[Update][Severity: Critical]Disclosed 2026-10-19Updated 2026-10-30 09:00OsakaLeaked 1.3MOrganizations 2
Hankyu Hanshin Department Stores: booking and other sites intrusionNew official notice · H2O Retailing 第三者による不正アクセス発生について （第2報）
[New][Severity: Critical]Disclosed 2026-10-30Updated 2026-10-30TokyoLeaked 1.2MOrganizations 1
Tin Pan Alley: business server intrusion[Update][Severity: Critical]Disclosed 2026-07-13Updated 2026-10-30 21:22TokyoLeaked 292.9KOrganizations 1
Nihon Kotsu: malware attackNew official notice · Nihon Kotsu 弊社システムへの不正アクセスに関するお知らせ（第6報）
[New][Severity: Critical]Disclosed 2026-10-30Updated 2026-10-30 22:02Tokyo, YamanashiLeaked 264KOrganizations 2
Japanticket: customer data leak through an analytics tool[New][Severity: Critical]Disclosed 2026-10-30Updated 2026-10-30OsakaLeaked 135KOrganizations 1
iDA: MyBRANDS job site intrusion[Update][Severity: Critical]Disclosed 2026-09-25Updated 2026-10-30 13:18SagaLeaked 80KOrganizations 1
Saga University: ransomware on its administrative system[Ransomware][Data leak][Service outage][Extortion]New official notice · Saga University Hospital 【お詫び】事務情報システムにおけるランサムウェア被害の発生について（10/30追記）