Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Disclosed Oct 14, 2026. Arcadia intrusion may have exposed about 930 119RAIDEN fire-staff/corps records (name/email/unit) and about 30 NET119 records (name/DOB/sex/address/phone/email/FAX etc.). “About” → blank; subsets not summed.
Disclosed Oct 14, 2026 (page updated Oct 15). No confirmed impact/leak for Hiroshima disaster-mail citizen data; staff-assembly system may have exposed staff name/email etc. No headcount.
Disclosed Oct 14, 2026 (page updated Oct 21). Arcadia-operated mail for disaster-safety / missing-persons / vulnerable / after-school / nursery services may have exposed name and email. No headcount.
Disclosed Oct 14, 2026. SpeeCAN RAIDEN (Arcadia) used for ward heads / welfare commissioners / fire corps / city staff may have exposed personal data. No headcount.
Disclosed Oct 14, 2026. SpeeCAN RAIDEN disaster flash-mail intrusion may have exposed emails etc. No headcount.
Disclosed Oct 13, 2026. Kitashiobara disaster-radio mail runs on Arcadia SpeeCAN RAIDEN. Third-party intrusion may have exposed personal data; emergency stop from 11:00 Oct 13. No headcount.
Disclosed Oct 13, 2026 (restart-notice page). 3,024 registrants at the time of intrusion confirmation; personal data may have leaked and delivery was emergency-stopped.
Suspicious activity affected the network between April 12 and 14, 2026; names and other personal data may be impacted.
Third notice page restates first-notice facts: SpeeCAN RAIDEN (Arcadia) intrusion may have exposed registered personal data. Service resumed after safety confirmation. No headcount. Lead first-public date Oct 13, 2026.
Possible data leak: Disclosed Oct 13, 2026 after Oct 7 Commune report. Up to 1,169 (under confirmation) Oshigoto Kaikaku Labo members: email, nickname, account name, bio, custom profile, groups, points, last-active. Service suspended.
Disclosed Oct 13, 2026. Arcadia intrusion may have exposed 34,783 disaster-radio mail addresses and 73 phone-service name/phone records. Subsets not summed.
Disclosed Oct 13, 2026. 3,802 registrants (as of Sep 30, 2026) may have had name/email/phone/FAX exposed.
3rd notice Oct 13, 2026. Suspicious access from Oct 5; ransomware report and shutdown Oct 7. No clear confirmed exfiltration footprint yet, but up to about 6.5M official-site/app registrant records (name/address/phone/email/sex/DOB/password hash/order history/member ID) may have leaked. No cards held. Demae-can/Uber Eats/phone-only orders out of scope.
An unauthorised actor gained access to the network environment, affecting personal information.
Arcadia emergency-stopped SpeeCAN RAIDEN from 11:00 Oct 13, 2026; restored around Oct 15. Emergency mass-notification system affected; personal data may have leaked, investigation ongoing. No headcount.
Possible data leak: Emergency stop of SpeeCAN RAIDEN (Arcadia) from 11:00 Oct 13 to 15:00 Oct 15, 2026. Affected citizen safety-mail and Hazardon app alerts. Whether personal data leaked still under investigation. No headcount.
Disclosed Oct 13, 2026. Support-software vulnerability abused Aug 10–Sep 27 for repeated DB exfiltration. 129,659 registrants through Sep 27 (incl. churned): phone/email/DOB/user ID/display name/balance/history/card name+expiry etc.; some also name/address/last-4. Login passwords, full card numbers and ID images not leaked. No confirmed fraudulent transactions.
Disclosed Oct 13, 2026. Vendor of the prefectural safety/emergency mail system was compromised; 27,667 registrant emails may have leaked (under investigation). New registrations paused; ongoing delivery continued.
Disclosed Oct 13, 2026. Arcadia SpeeCAN RAIDEN intrusion may have exposed about 11,000 Isama Mail registrants (emails) and about 900 staff safety/assembly records (name/unit/email). “About” figures → blank; subsets not summed.
Disclosed Oct 13, 2026. SpeeCAN RAIDEN used for Nanto emergency mail may have exposed email, optional name and optional phone. No headcount. Notice states delivery still operating normally.