Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Possible data leak: An unauthorised individual accessed data within the network from June 8 to 12, 2026; the data may include names with SSNs and other elements.
Malicious outbound script found in APORITO store on Aug 5, 2026; site closed same day. Possible exposure of May 1–Aug 5, 2026 orderers’ name/address/phone/email and card number/expiry/CVV; card-affected customers emailed Aug 8; disclosed Aug 10.
Unauthorized access to the Isabou Net server confirmed Jan 26, 2026. Expert review found member name/email/login password/company/address/phone may have been viewed or obtained, discovered July 27; disclosed Aug 10.
An unknown actor accessed files within the network between August 8 and 27, 2025; on July 16, 2026 personal information was found in files that may have been accessed.
Website intrusion/defacement found June 16, 2026 and the site was taken down. No exfiltration traces found, but data may have been viewable for a period; possible exposure of pre-2026-06-16 form submissions (name, kana, email, inputs) disclosed Aug 10 (unauthorized-access notice itself was posted July 13).
Investigation of a network disruption first learned of on November 11, 2025 found files may have been accessed or acquired; on June 8, 2026 patients’ or employees’ personal information was found in them.
On July 6, 2026 a National Qualifications system login-history file sent to another ministry wrongly included name, user ID and affiliation codes for 150 staff of other licensing bodies due to ambiguous procedure wording; recipient did not forward and deleted it; disclosed Aug 7.
A loaned work USB was found missing on April 16, 2026 and remains unfound. It may have held conference materials plus non-public consultation files and personal data (affiliation/name, etc.; no sensitive personal data). Device is password-locked after repeated failures; disclosed Aug 7.
After an external tip on July 28, 2026, investigation found stored mail in some officers’ mailboxes may have leaked; disclosed Aug 7 (counts refined Aug 28).
When updating Toyohira Public Works’ winter road-closure page, staff wrongly used internal-only residential map data, posting household names from 2025-11-18 until discovery on 2026-05-28; posting stopped same day; disclosed Aug 7.
On Aug 5, 2026 an employee mailbox was intruded and partner/staff personal data in it may have been viewed; containment same day; disclosed Aug 6.
Possible data leak: Vendor Fuso Dentsu’s cloud share used for Yukinomizu sales-admin work was intruded on July 15, 2026; personal-data exposure risk reported to Loginet on July 31; disclosed Aug 6. Scope is 2023 May/Oct work data, not the live sales system.
On September 19, 2025, the firm discovered that an unauthorised user had accessed its network earlier that day; Social Security numbers, other government ID numbers, names and bank account information may have been accessed.
In the early hours of August 6, 2026, attackers entered via a network device, took business documents from group servers and devices, and deployed ransomware. The first report was published the same day.
Ace & Tate initially warned customers of possible exposure on August 6; CEVA confirmed access and copying of personal data on September 10.
Possible data leak: An incident on work tool BAND occurred July 10, 2026 and was recognized as unauthorized access on July 15. Some members and staff (name, DOB, address, phone, email, etc.) were in scope; individuals notified by Aug 5; disclosed Aug 6. Cards, bank accounts and My Number not handled on BAND.
Suspicious activity on managed mailbox info@e-house.co.jp on July 22, 2026 led to lockout and investigation. Possible leak of name/email/phone/company name/address disclosed Aug 6. Aug 21 update confirmed spam misuse of the account.
An external HDD left on a faculty desk was found missing on June 15, 2026 (taken out in early April for migration). It held FY2023–2024 grades, exams, attendance, guidance notes, etc.; disclosed Aug 5.
On Aug 4, 2026 an external tip indicated some staff accounts in the mail/work environment may have been misused; disclosed Aug 5. No impact on core news/editing systems.
Defacement of the Yamanakako seminar-house booking site was found April 22, 2026 and attributed to likely unauthorized access. Possible leakage of booking users from 2022-05-09 to 2026-04-22 disclosed Aug 5.