Overview
28,824 deduplicated records (including 35 sensitive items): customer contacts' names, emails and login IDs, part of customer employees' attendance records kept for maintenance, and staff data. No access to production attendance data was found. The cause was misconfiguration and poor information handling on the development server.
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
Stopped the server, cut access, invalidated credentials, reported to the PPC on October 30 and is contacting those affected.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 不正アクセスによる情報漏えいに関するお詫びとお知らせ株式会社チームスピリット · 2026-11-09