Recherchez par entreprise, pays, secteur, année et méthode d’attaque. Consultez les données concernées, la portée, la vérification, les réponses et les sources.
Possible data leak: Following Ryomo Systems’ internal-network intrusion (maintainer of Hiroshima Gas customer systems), the company posted on Sep 30, 2026 that customer-data leakage was not confirmed at that time and review continues. Related to the Ryomo incident.
Unauthorized access to a managed server confirmed Sep 26, 2026; possible leakage of partner bank details plus staff/some students/external lecturers’ name/address/phone/bank data across Hiroshima Shudo University and affiliated schools; disclosed Sep 30. Counts under review. No confirmed public posting or misuse.
Third-party intrusion into the LINE official-account campaign-only system; LINE display names and campaign prize info for some customers may have been viewed or exfiltrated; disclosed Sep 29, 2026. Counts under review. No payment/bank/sensitive data on that system.
On Sep 1, 2026 a manual send mixed a Sompo Japan policyholder ZIP (kana name, deduction policy no., business ID) into another insurer’s package. Recipient deleted it; no further exfiltration found. 177,426 policyholders (may fall after dedupe). Disclosed Sep 29.
A kaigo workplace-certification application file posted by a contractor left name/DOB/sex/title for 183 officers at 24 corporations viewable. Disclosed Sep 29, 2026.
Unauthorized access reached member servers via the Seicomart app. First notice Sep 29, 2026 cited ~570k accounts; fourth notice Oct 5 fixed 574,647 people (name, sex, DOB, address, phone, email). Passwords/cards out of scope. First disclosure remains Sep 29.
After seeing a public claim on Sep 28, 2026, Unirita confirmed intrusion and theft from a specific SaaS document system; first notice Sep 29. Oct 9 update confirmed leakage of contracts, customer auth credentials, customer-employee/external personal data, and employee personal data. No count published. Distinct from the Meruhai vendor incident. First disclosure remains Sep 29.
On Sep 28, 2026 at 10:00 an air-emissions survey notice was posted with an Excel sheet containing site contacts’ name/phone/email; replaced ~11:00. Viewable about one hour. 572 businesses. Disclosed Sep 29.
Yamato confirmed unauthorised access to its Kuroneko deferred-payment service on September 28, 2026, announced it on September 29, and confirmed exfiltration in its October 16 fourth report.
After suspicious guest messages from around Sep 21, 2026, Temairazu confirmed TEMAIRAZU intrusion. Guest name/phone/email, property name, check-in/out dates and rates may have been viewed or acquired. Oct 9 timely disclosure cites up to about 4.45 million people. No card data held. First disclosure remains Sep 28.
Metabase vulnerability abuse stole Special Learning/Shift and related customer data; first notice Sep 28, 2026. Oct 27 confirmed report fixed the headcount at 82,723 and noted some sensitive health-related fields. First disclosure remains Sep 28.
Shueisha announced on September 28 that unauthorised access to HAPPY PLUS COMMUNITY, its fashion-media blogger management system, had allowed registered data to be viewed and taken.
On Sep 24, 2026 Ryomo reported possible exfiltration of Nagano Toshi Gas customer data after a network intrusion; city-gas company disclosed Sep 28. Counts/fields still under review. No secondary misuse found.
Ryomo ransomware incident on Aug 14, 2026; on Sep 24 the city learned student school/grade/name/account/password data (3,789) may have leaked; disclosed Sep 28. Address/grades/health out of scope.
Possible data leak: Saga University found apparent ransomware on an administrative NAS on September 24, 2026, announced it on September 28, and on October 30 said leakage of personal data including patient data could not be ruled out.
Ryomo Systems network intrusion may have exposed files with name/address/phone/billing IDs for customers from Nov 2023–Apr 2024 (~124,000); disclosed Sep 28, 2026. No bank/card data. Core customer system not breached.
Mass unauthorized access detected Sep 26, 2026. Possible viewing of member/some-ex-member emails and some name/prefecture fields; second notice cites up to 442,779 people. Cards via external payment out of scope. First disclosure Sep 27.
Possible data leak: Ransomware against group servers confirmed early Sep 26, 2026. Some group sales systems disrupted. Exfiltration not confirmed but under investigation; disclosed same day. Rail operations unaffected.
Amadeus platform used for LEGOLAND Japan Hotel bookings was breached; 1,557 reservations’ name/email/phone were in scope. No confirmed access to cards/passwords/passports. Disclosed Sep 25, 2026.
Third-party intrusion into ApplyNow’s recruiting platform (used for Maisen part-time interviews) leaked applicant personal data; disclosed Sep 25, 2026. No count on the page. One of the ApplyNow root-incident victim organisations.