Investigating

Dentsu Soken: personal data in a client FACERE environment may have leaked via access misconfiguration

Dentsu Soken announced on November 4 that a misconfigured access permission in a client environment of its FACERE service allowed unauthorised access on September 10, 2026, and personal data may have leaked.

Last updated: 2026-11-09

Overview

No count or field list was found in the notice (count blank). No similar misconfiguration was found in other client environments as of November 3.

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

  1. 【重要】当社サービスを利用する特定企業の環境下における個人情報流出の可能性に関するお知らせとお詫び株式会社電通総研 · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.

Comments and replies

Write a comment

No account needed. Comments appear immediately.

Do not post private names, addresses, passwords, or codes. Automatic masking is limited; review your content before submitting.