Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Possible data leak: Disclosed Oct 13, 2026 after Oct 7 Commune report. Up to 1,169 (under confirmation) Oshigoto Kaikaku Labo members: email, nickname, account name, bio, custom profile, groups, points, last-active. Service suspended.
Disclosed Oct 13, 2026. Arcadia intrusion may have exposed 34,783 disaster-radio mail addresses and 73 phone-service name/phone records. Subsets not summed.
Disclosed Oct 13, 2026. 3,802 registrants (as of Sep 30, 2026) may have had name/email/phone/FAX exposed.
3rd notice Oct 13, 2026. Suspicious access from Oct 5; ransomware report and shutdown Oct 7. No clear confirmed exfiltration footprint yet, but up to about 6.5M official-site/app registrant records (name/address/phone/email/sex/DOB/password hash/order history/member ID) may have leaked. No cards held. Demae-can/Uber Eats/phone-only orders out of scope.
Arcadia emergency-stopped SpeeCAN RAIDEN from 11:00 Oct 13, 2026; restored around Oct 15. Emergency mass-notification system affected; personal data may have leaked, investigation ongoing. No headcount.
Possible data leak: Emergency stop of SpeeCAN RAIDEN (Arcadia) from 11:00 Oct 13 to 15:00 Oct 15, 2026. Affected citizen safety-mail and Hazardon app alerts. Whether personal data leaked still under investigation. No headcount.
Disclosed Oct 13, 2026. Support-software vulnerability abused Aug 10–Sep 27 for repeated DB exfiltration. 129,659 registrants through Sep 27 (incl. churned): phone/email/DOB/user ID/display name/balance/history/card name+expiry etc.; some also name/address/last-4. Login passwords, full card numbers and ID images not leaked. No confirmed fraudulent transactions.
Disclosed Oct 13, 2026. Vendor of the prefectural safety/emergency mail system was compromised; 27,667 registrant emails may have leaked (under investigation). New registrations paused; ongoing delivery continued.
Disclosed Oct 13, 2026. Arcadia SpeeCAN RAIDEN intrusion may have exposed about 11,000 Isama Mail registrants (emails) and about 900 staff safety/assembly records (name/unit/email). “About” figures → blank; subsets not summed.
Disclosed Oct 13, 2026. SpeeCAN RAIDEN used for Nanto emergency mail may have exposed email, optional name and optional phone. No headcount. Notice states delivery still operating normally.
First notice Oct 13, 2026. Arcadia-operated Ayase safety/security mail may have leaked personal data; 11,053 registered users. Service suspended.
Disclosed Oct 13, 2026. Arcadia SpeeCAN RAIDEN intrusion may have exposed Tomiya safety-mail registered emails. No headcount.
Disclosed Oct 13, 2026 (page also notes Oct 30 update). SpeeCAN RAIDEN intrusion may have exposed resident emails; fire-corps name/email/phone/unit/rank; and staff name/email/staff-ID/affiliation. Headcount under investigation.
Disclosed Oct 13, 2026. SpeeCAN RAIDEN intrusion may have exposed 1,210 registrations (1,000 city staff / 210 medical etc.). Published total 1,210 stored; breakdown in text.
Disclosed Oct 13, 2026. Disaster/emergency-mail SpeeCAN RAIDEN intrusion may have exposed registered emails and optionally registered names. No headcount. Delivery still operating normally.
Disclosed Oct 13, 2026. Arcadia reported SpeeCAN RAIDEN intrusion (Oct 11 16:30) and possible personal-data leak. Possible exposure: disaster-mail registered emails. Notice states city’s delivery was not in the emergency-stop set. No headcount.
First notice Oct 13, 2026 (ongoing updates). Suspicious activity Oct 11 16:30; path blocked ~03:00 Oct 12. SpeeCAN RAIDEN contact name/email/phone/FAX, staff, contract data and message history may have leaked. Estimated maxima: ~3,136,000 emails, ~105,000 phones, ~15,000 faxes. No payment data. Subcount “about” estimates not summed. Many municipality/enterprise victim notices followed.
Disclosed Oct 13, 2026 (resume note Oct 16). Arcadia operator intrusion may have exposed personal data. Delivery stopped Oct 13 and resumed Oct 16. Leak confirmation/scope still under investigation. No headcount.
Possible data leak: Disclosed Oct 13, 2026. About 3,000 resident emails, about 1,000 staff-assembly records and about 10 FAX records may all have leaked. Subsets not summed.
Parent DCM Holdings disclosed Oct 13, 2026. Anomalous access Sep 21 confirmed as intrusion Oct 8; app fully stopped Oct 9. 419 members: member number, email, status, stage, points etc. Name/address/phone/DOB/password/cards not included. Headcount still being refined.