Confirmed

Fivot (IDARE): support-software vulnerability led to leak of 129,659 registrants’ data

Disclosed Oct 13, 2026. Support-software vulnerability abused Aug 10–Sep 27 for repeated DB exfiltration. 129,659 registrants through Sep 27 (incl. churned): phone/email/DOB/user ID/display name/balance/history/card name+expiry etc.; some also name/address/last-4. Login passwords, full card numbers and ID images not leaked. No confirmed fraudulent transactions.

Last updated: 2026-11-09

Overview

129,659 people.

Timeline

2026-08-10Occurred
2026-09-27Discovered
2026-10-13Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

「IDARE」における不正アクセスによる個人情報漏えいに関するお知らせとお詫び株式会社Fivot · 2026-11-09

Fivot (IDARE): support-software vulnerability led to leak of 129,659 registrants’ data

Overview

Timeline

Organization response

What you can do

Sources

Related information

No published information yet

Comments and replies

Write a comment