Confirmé

LEAN BODY: Metabase intrusion led to theft of data on about 440,000 customer accounts

Metabase vulnerability abuse from Aug 11, 2026 led to theft of customer data; disclosed Sep 15. Scope: about 440,000 accounts including churned users (unique people may be fewer). Email, nickname, sex, DOB, height/weight etc., hashed passwords, card last-4. PPC confirmed report Oct 23.

Dernière mise à jour: 2026-11-09

Ce contenu est affiché en English.

Présentation

“About 440,000 accounts” → blank.

Chronologie

InconnuSurvenue
2026-09-08Découverte
2026-09-15Divulgation

Réponse de l’organisation

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Que faire ?

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

お客様情報の不正取得に関するご質問株式会社LEAN BODY · 2026-11-09
弊社が利用する分析ツールへの不正アクセスによるお客様情報の取得について（お詫び）株式会社LEAN BODY · 2026-11-09

LEAN BODY: Metabase intrusion led to theft of data on about 440,000 customer accounts

Présentation

Chronologie

Réponse de l’organisation

Que faire ?

Sources

Informations associées

Aucune information publiée

Commentaires et réponses

Écrire un commentaire