Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Possible data leak: NTTPC issued a caution on October 20 after Ymir Link's Cuenote FC, used for service email, was breached and data taken externally; impact on its customers was not confirmed but could not be ruled out.
Files were taken in a network intrusion and contained names and other data; the listing gives January 6 and February 4, 2026 as breach dates.
Disclosed Oct 20, 2026. SpeeCAN RAIDEN (Arcadia) intrusion may have exposed name/email/phone. No headcount.
Disclosed Oct 20, 2026. Arcadia-operated disaster mail may have exposed emails and related registrant data. No headcount.
Possible unauthorised network access was identified July 10, 2026; investigators could not determine whether specific materials were accessed.
An intrusion around August 5, 2025 let an unauthorised third party obtain personal data including names, contacts and dates of birth.
Unauthorised access from October 14 exposed 743 personal-data items including company names and contact emails. A November 6 update added 142 event-registration contacts, 9,252 current/former staff and 19 vendor contacts.
Disclosed Oct 19, 2026. Notice states 106 people may have had data exposed. Using that published possible-leak headcount.
Disclosed/updated Oct 19, 2026. SpeeCAN RAIDEN Hashimoto disaster mail may have exposed personal data. No headcount.
Trustbank suspended services and posted a notice on October 19 after spotting unusual access, and on October 20 announced member data had leaked in an October 17 intrusion.
On October 16, 2026, Ymir Link found unauthorised access to some Cuenote FC email-delivery servers and announced on October 19 that personal data had been exfiltrated.
Disclosed Oct 17, 2026. Up to 380 119RAIDEN and up to 300 NET119 records may have leaked. Maximum → blank.
An unauthorised party accessed the network and acquired files containing personal information.
Disclosed Oct 16, 2026. Possible exposure of 1,277 resident-mail and 151 staff-mail registrants. Subsets not summed.
Disclosed Oct 16, 2026. Arcadia intrusion may have exposed staff name/email and some fire-corps name/email. Inami Anshin Net out of scope. No headcount.
On August 24, 2026, a file with patient information was inadvertently emailed to another patient; it may include service dates, providers and billing details.
Raksul said 6,412 submission records from its service-information websites may have been exposed through the Studio vendor incident.
Nikkei disclosed that unauthorized access on October 7 leaked approximately 1.83 million entries from a development-cloud environment.
Systems of TradeWorks, which operates Iwai Cosmo's online-trading platform, were accessed without authorisation and some customer data leaked; detected October 14.
Disclosed Oct 16, 2026. SpeeCAN RAIDEN intrusion may have exposed personal data. No headcount.