개요
Malware on a device obtained credentials on September 18, 2025, followed by repeated logins from November 27; the event was discovered February 18, 2026 and possible personal-data exposure disclosed March 27. Potential fields include names, addresses, phones, email, allergies and reservations, excluding cards and My Number identifiers. The 18,553 count represents records, not unique people.
진행 경과
- 발생
- 발견
- 공개
Credentials obtained through malware infection.
Repeated unauthorised logins began.
Unauthorised access discovered.
Possible leakage disclosed.
기업·기관의 대응
The company isolated the device, changed and disabled legacy accounts, commissioned external investigation, reported to the privacy regulator and notified affected parties.
이용자 대응 방법
Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.
정보 출처
- 旧メールシステムの不正アクセスに関する通知ゼットン · 2026-11-09