Confirmed

WingArc1st: Commune-hosted nest Portal had 1,200 members’ data illicitly viewed

First notice Oct 8, 2026; follow-up Oct 16. Commune admin-impersonation led to illicit viewing of email, account name, user ID, company, role, name, SNS handle and prefecture for 1,200 nest Portal members (incl. churned). Portal suspended. Official pages unreachable at research time; body confirmed via public search of the official text and IncidentLog, official URLs retained.

Last updated: 2026-11-09

Overview

Follow-up confirmed 1,200.

Timeline

UnknownOccurred
2026-10-06Discovered
2026-10-08Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

ウイングアーク1stの不正アクセス（2026年10月）IncidentLog · 2026-11-09
【続報】当社ユーザー向け交流サイト「nest Portal」における個人情報漏えいに関するお詫びとご報告ウイングアーク１ｓｔ株式会社 · 2026-11-09
当社ユーザー向け交流サイト「nest Portal」における個人情報漏えいの可能性に関するお詫びとご報告ウイングアーク１ｓｔ株式会社 · 2026-11-09

WingArc1st: Commune-hosted nest Portal had 1,200 members’ data illicitly viewed

Overview

Timeline

Organization response

What you can do

Sources

Related information

Related information

No published information yet

Comments and replies

Write a comment