Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Disclosed Oct 13, 2026. Arcadia vendor intrusion may have exposed Imabari fire-mail (email / in-out city / age band), staff-assembly mail (staff name/email) and fire-corps assembly mail (email/name). No headcount. Fire-mail resumed Oct 15.
Possible data leak: Disclosed Oct 13, 2026. Vendor SpeecanRaiden intrusion (Oct 11 16:30; emergency measure Oct 12 03:00). About 1,000 disaster-mail registrations; whether data actually leaked still under investigation.
Disclosed Oct 12, 2026 after Oct 7 Commune report. Intrusion ~19:18–21:02 on Oct 6 may have exposed name, DOB, sex, address, email, member ID, nickname, bio and groups for about 1,600 PAS Life registrants. No cards. No Yamaha Motor system intrusion.
Disclosed Oct 11, 2026. On Oct 6 a Commune admin account was misused; email, nickname and account name for 495 FDS COMMUNITY members may have been viewed.
Disclosed Oct 9, 2026. Commune intrusion leaked member data including email for about 2,000 LUMIX Community and about 3,000 Hair Sap by Panasonic Beauty members; both communities suspended. Official page returned HTTP403 at research time; body confirmed via IncidentLog summary and press, with the official URL retained as a source.
Commune intrusion Oct 5–6, 2026 may have exposed email, nickname, join date, sex, age band, prefecture and owned-car name for about 3,000 Suzuki Village members. No Suzuki system intrusion. Disclosed Oct 9.
Commune intrusion led to confirmed viewing/acquisition of email, display name, username, bio, profile fields and groups for members registered as of Oct 5, 2026. Password leak not confirmed. No headcount published. Disclosed Oct 9.
Commune reported admin-account abuse; company name, name, account name, kana, email and profile for 1,164 members may have been viewed/taken. Disclosed Oct 9.
After Commune reported member-data leakage, PROGRIT disclosed Oct 9. About 2,300 members (incl. churned): user ID, nickname, email, usage and profile. Passwords/DMs not leaked. No PROGRIT system intrusion.
After Commune notified LY on Oct 6, 2026 that DS.LAB (inside DS.INSIGHT) was hit, personal data for 1,750 users (nickname, name, email, profile, etc.) may have been viewed/taken. No LY system intrusion. Disclosed Oct 9.
Commune-hosted Sansan User Forum compromised. Confirmed leak: 1,325 (email, account name, bio, image, groups). Possible additional: 8,687 without email fields. Core Sansan/Bill One/Eight systems unaffected. Disclosed Oct 9. Count stores confirmed 1,325.
On Oct 6, 2026 an Academy admin account was misused; member data for up to 843 people (name, kana, sex, email, profile, usage) may have been viewed/taken. Passwords/payment out of scope. Disclosed Oct 9 (updated Oct 13).
Intrusion detected and blocked Oct 8, 2026; exfiltration traces confirmed same day for some members who had uploaded resumes/CVs. Disclosed Oct 9. 449 resume files and 1,845 career-related documents. Cards/passwords out of scope. Other coconala services unaffected.
On October 6, 2026, dip confirmed unauthorised overseas access to a Baitoru website function and announced a partial leak of member email addresses.
Member data leaked during windows on Oct 5–6 and Oct 7, 2026. About 307,000 members (estimate): ~126k with email (incl. ~42k staff/demo) and ~181k without email. 144 accounts had passwords force-reset to temporary values (password secrets themselves not confirmed leaked). No DM/payment data. Not caused by client misconfiguration. Public notice page dated Oct 9.
Around Oct 6, 2026 Commune hosting Sumai Hiroba and Nyanpeki Hiroba was compromised; nickname, email, bio, points etc. may have leaked. Post bodies/DMs/passwords/address/cards not leaked. No headcount. Disclosed Oct 9.
Suspicious access to Commune on Oct 5, 2026; on Oct 7 admin abuse led to viewing/leakage of customer data. Up to 1,800 accounts (email, nickname, profile, Potemile points, etc.). No cards/name/address/phone held. Disclosed Oct 9 (Oct 13 update covers restoration delay).
Commune server intrusion (~11:59–20:36 on Oct 6, 2026) leaked email, display name, account name, bio, icon and groups for about 1,600 YNE registrants. No Yamaha system intrusion. Disclosed Oct 9.
Anomaly ~20:30–23:30 on Oct 5, 2026 noticed Oct 6; leakage confirmed Oct 7; timely disclosure Oct 9. About 26,000 group-member records and about 36,000 Kahala Yokohama reservation records leaked. Usage/medical/cards/bank/email/ID docs not on that system. Sub-counts not summed.
On October 6, 2026, BOOKOFF confirmed unauthorised access to subsidiary BOOKOFF Corporation's member system and that member data was taken between October 4 and 6.