기업명, 국가, 업종, 발생 연도, 공격 방식으로 사건을 검색하고 유출 정보, 피해 규모, 확인 상태, 기업 대응과 출처를 확인하세요.
The Career Center’s written-exam prep portal server was hit by ransomware on Apr 19, 2026 and taken offline. University-issued emails entered at registration may have leaked; no public posting confirmed; disclosed Aug 19.
Possible data leak: OEM website CMS was intruded Aug 14–17, 2026; first notice Aug 18. Follow-ups (Aug 26/28) cleared name/address/phone/DOB and left email (and some non-PII admin fields) as still possibly exposed. Passwords and cards out of scope; direct-sales users out of scope.
Unauthorized access to an internal BI tool began around Aug 10, 2026; a data download was confirmed Aug 16. First notice Aug 18 confirmed leakage; Sep 30 fourth report fixed a vulnerability cause and about 170,000 records. Some data appeared on SNS. Cards and passwords out of scope.
Provider tip found a long-unused rental server hit by ransomware encryption and intrusion traces around Apr 30–May 1, 2026. After investigation, possible viewing of self-scoring-system user data through 2016 was disclosed Aug 17. No card data held.
On Aug 3, 2026 a guardian reported DM names and addresses were shifted by one row; caused by a row-delete error when building the mail file. Individual apology letters sent by Aug 12; disclosed Aug 17.
SAKURA internet detected anomalies on a maintenance server of its rental-server service on August 9, 2026, announced it on August 17, and in its September 10 third report said the sales-management database was also accessed without authorisation.
VPN account abuse on Aug 12, 2026; detected Aug 14; ransomware confirmed. Third notice (Sep) reports intrusion traces on some servers and possible leakage of partner/customer/employee personal data; counts still under review. First public notices were Aug 15 and 19 (this source is the third notice stating those dates).
Charm detected unauthorised access to its Charm Honten online pet store on August 12, 2026, announced it on August 13 and reported it to the PPC.
Possible data leak: On Aug 5, 2026 a staff member lost a bag with a work PC after drinking; reported Aug 6. Phone recovered; PC still missing. It held about 20,000 completed-works customer records and 152 supply-inquiry records; device requires ID/password; disclosed Aug 13.
Partial server-file encryption found Aug 10, 2026; first notice Aug 13. Final report (Oct 13) found no clear exfiltration traces but could not rule out theft; possible exposure of 125 employee records and 11,587 partner-contact records.
Unauthorized access to reservation/core systems confirmed Aug 5, 2026; systems paused with first notice Aug 12. Oct 5 follow-up confirmed a reservation-site program vulnerability was abused to reach the core system and exfiltrate data on about 1.05 million accounts (customers, clinic affiliates, HQ staff).
Malicious outbound script found in APORITO store on Aug 5, 2026; site closed same day. Possible exposure of May 1–Aug 5, 2026 orderers’ name/address/phone/email and card number/expiry/CVV; card-affected customers emailed Aug 8; disclosed Aug 10.
Unauthorized access to the Isabou Net server confirmed Jan 26, 2026. Expert review found member name/email/login password/company/address/phone may have been viewed or obtained, discovered July 27; disclosed Aug 10.
Website intrusion/defacement found June 16, 2026 and the site was taken down. No exfiltration traces found, but data may have been viewable for a period; possible exposure of pre-2026-06-16 form submissions (name, kana, email, inputs) disclosed Aug 10 (unauthorized-access notice itself was posted July 13).
On July 6, 2026 a National Qualifications system login-history file sent to another ministry wrongly included name, user ID and affiliation codes for 150 staff of other licensing bodies due to ambiguous procedure wording; recipient did not forward and deleted it; disclosed Aug 7.
A loaned work USB was found missing on April 16, 2026 and remains unfound. It may have held conference materials plus non-public consultation files and personal data (affiliation/name, etc.; no sensitive personal data). Device is password-locked after repeated failures; disclosed Aug 7.
After an external tip on July 28, 2026, investigation found stored mail in some officers’ mailboxes may have leaked; disclosed Aug 7 (counts refined Aug 28).
When updating Toyohira Public Works’ winter road-closure page, staff wrongly used internal-only residential map data, posting household names from 2025-11-18 until discovery on 2026-05-28; posting stopped same day; disclosed Aug 7.
On Aug 5, 2026 an employee mailbox was intruded and partner/staff personal data in it may have been viewed; containment same day; disclosed Aug 6.
Possible data leak: Vendor Fuso Dentsu’s cloud share used for Yukinomizu sales-admin work was intruded on July 15, 2026; personal-data exposure risk reported to Loginet on July 31; disclosed Aug 6. Scope is 2023 May/Oct work data, not the live sales system.