Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Commune reported admin-account abuse; company name, name, account name, kana, email and profile for 1,164 members may have been viewed/taken. Disclosed Oct 9.
After Commune reported member-data leakage, PROGRIT disclosed Oct 9. About 2,300 members (incl. churned): user ID, nickname, email, usage and profile. Passwords/DMs not leaked. No PROGRIT system intrusion.
After Commune notified LY on Oct 6, 2026 that DS.LAB (inside DS.INSIGHT) was hit, personal data for 1,750 users (nickname, name, email, profile, etc.) may have been viewed/taken. No LY system intrusion. Disclosed Oct 9.
Commune-hosted Sansan User Forum compromised. Confirmed leak: 1,325 (email, account name, bio, image, groups). Possible additional: 8,687 without email fields. Core Sansan/Bill One/Eight systems unaffected. Disclosed Oct 9. Count stores confirmed 1,325.
On Oct 6, 2026 an Academy admin account was misused; member data for up to 843 people (name, kana, sex, email, profile, usage) may have been viewed/taken. Passwords/payment out of scope. Disclosed Oct 9 (updated Oct 13).
Intrusion detected and blocked Oct 8, 2026; exfiltration traces confirmed same day for some members who had uploaded resumes/CVs. Disclosed Oct 9. 449 resume files and 1,845 career-related documents. Cards/passwords out of scope. Other coconala services unaffected.
On October 6, 2026, dip confirmed unauthorised overseas access to a Baitoru website function and announced a partial leak of member email addresses.
Member data leaked during windows on Oct 5–6 and Oct 7, 2026. About 307,000 members (estimate): ~126k with email (incl. ~42k staff/demo) and ~181k without email. 144 accounts had passwords force-reset to temporary values (password secrets themselves not confirmed leaked). No DM/payment data. Not caused by client misconfiguration. Public notice page dated Oct 9.
Around Oct 6, 2026 Commune hosting Sumai Hiroba and Nyanpeki Hiroba was compromised; nickname, email, bio, points etc. may have leaked. Post bodies/DMs/passwords/address/cards not leaked. No headcount. Disclosed Oct 9.
Suspicious access to Commune on Oct 5, 2026; on Oct 7 admin abuse led to viewing/leakage of customer data. Up to 1,800 accounts (email, nickname, profile, Potemile points, etc.). No cards/name/address/phone held. Disclosed Oct 9 (Oct 13 update covers restoration delay).
Commune server intrusion (~11:59–20:36 on Oct 6, 2026) leaked email, display name, account name, bio, icon and groups for about 1,600 YNE registrants. No Yamaha system intrusion. Disclosed Oct 9.
Anomaly ~20:30–23:30 on Oct 5, 2026 noticed Oct 6; leakage confirmed Oct 7; timely disclosure Oct 9. About 26,000 group-member records and about 36,000 Kahala Yokohama reservation records leaked. Usage/medical/cards/bank/email/ID docs not on that system. Sub-counts not summed.
On October 6, 2026, BOOKOFF confirmed unauthorised access to subsidiary BOOKOFF Corporation's member system and that member data was taken between October 4 and 6.
Unauthorized external access confirmed Oct 6, 2026 and blocked. Multiple files may have been exfiltrated and may include customer data (under investigation). Mega Egg customer data not confirmed leaked. No headcount. Disclosed Oct 9.
Commune reported an Oct 6, 2026 intrusion on Oct 7. Admin-account abuse on Toki Labo led to confirmed viewing/acquisition and leakage of display name, username, email and profile (including name/address/age/phone) for 2,950 members registered after the May 12, 2026 renewal. Disclosed Oct 9.
Commune intrusion Oct 5–6, 2026 may have exposed user ID, display name, email and optional profile fields for 1,450 Lookmee Room members. Core Lookmee product / parent-child data on separate systems unaffected. Disclosed Oct 9.
Possible data leak: Around 21:50 on Oct 7, 2026, Kissei Shoji staff received a data-theft notice email. Parent Kissei Pharmaceutical disclosed Oct 9. Exfiltration cannot be ruled out and may include sensitive personal information. Counts/confirmation under investigation.
Commune platform intrusion with admin impersonation led to confirmed viewing/acquisition of email, nickname, age, sex and profile data for all 358 members. Name/address not leaked (Oct 11 update). Disclosed Oct 9.
Commune server intrusion confirmed leakage of ZENB GARDEN member data for 897 people (email, sex, nickname, profile, etc.). Upper bound all 949 members. Name/address/phone/payment/official-store data and passwords not in scope/not leaked. Disclosed Oct 9.
On Oct 6, 2026 Commune-hosted Mount Cafe club was accessed; member-list data for an estimated 291 members (email, display name, profile, etc.) may have been viewed/taken. Confirmed exfiltration not established. Disclosed Oct 9.