Possible data leak: NTTPC issued a caution on October 20 after Ymir Link's Cuenote FC, used for service email, was breached and data taken externally; impact on its customers was not confirmed but could not be ruled out.
Unauthorised access from October 14 exposed 743 personal-data items including company names and contact emails. A November 6 update added 142 event-registration contacts, 9,252 current/former staff and 19 vendor contacts.
Trustbank suspended services and posted a notice on October 19 after spotting unusual access, and on October 20 announced member data had leaked in an October 17 intrusion.
On October 16, 2026, Ymir Link found unauthorised access to some Cuenote FC email-delivery servers and announced on October 19 that personal data had been exfiltrated.
Disclosed Oct 16, 2026. Arcadia intrusion may have exposed staff name/email and some fire-corps name/email. Inami Anshin Net out of scope. No headcount.
On August 24, 2026, a file with patient information was inadvertently emailed to another patient; it may include service dates, providers and billing details.
Systems of TradeWorks, which operates Iwai Cosmo's online-trading platform, were accessed without authorisation and some customer data leaked; detected October 14.