按企业、国家、行业、发生年份和攻击方式查询事件，了解泄露数据、影响范围、核实状态、企业应对及来源。
Possible data leak: After finding a malicious file on the hosting server on January 8, 2026, Nittai disclosed on February 9 that its N-Trading shop had been tampered with; a follow-up listed 3,887 members.
A cloud-security tool found support-renewal forms on cloud storage that may have been publicly readable; Saison Technology disclosed this on February 9.
On February 5, 2026, delivery-note PDFs meant for individual recipients were sent to multiple partners; after recall, 10 partners still received them. Parent Fukuda Denshi disclosed on February 9.
After card-brand alerts of possible card-data exposure on its EC site, Beauty Garage stopped card payments and issued a first notice on February 6, 2026, with later updates still reporting ongoing investigation.
Unauthorised access may have exposed 408 customer records and information about partners and member firms. Category counts are not added and disclosure is not treated as confirmed.
Possible data leak: After confirming ransomware on February 3, 2026 and issuing a first notice on February 4, later investigation found some personal data on a leak site.
Possible data leak: Dotmoney showed other accounts’ data between 15:03 and 16:49 on February 4, 2026; the official blog reported recovery and details. Not a cyber-attack.
After confirming ransomware on February 3, 2026 and issuing a first notice, later investigation confirmed external personal-data leakage; the May 21 sixth report fixed the count at 207,773.
On January 14 and 21, 2026, bulk student emails used To instead of Bcc so addresses were visible to others; the university disclosed this on February 2.
After finding malicious redirects on January 23, Integral closed sites and on January 30 reported a possible leak of contact-form data; a April 17 final report found no successful-exfiltration record but could not fully rule it out.
JA Kyosai announced on January 27 that a settings error left other JA policyholder/related personal data viewable to administrators between 08:00 and 09:20 on January 14, 2026.
SoftBank announced on January 27 that a proxy-server software bug could briefly treat customers as someone else, causing wrong My SoftBank profiles and MMS sender/recipient mix-ups. Not a cyber-attack.
After suspicious web-server access on 11 Dec 2025, GOT announced on 26 Jan 2026 that reader-survey personal data may have leaked.
After card-brand alerts, card payments were stopped in May 2025; on 26 Jan 2026 Intellex reported a possible leak from payment-application tampering.
Possible data leak: On January 22 Ebara CLUB showed other members’ profiles after login; the site was stopped, disclosed on January 23, and a February 5 second report explained cause and scope.
While consolidating FY2025 withholding records, data were sent to a wrong email address; discovery was on January 19 and public notice on January 23.
Possible data leak: The city announced on January 23 that a URL-restricted business page briefly appeared in search engines and that a posted zip contained personal data.
Unauthorised access occurred 27 Nov–13 Dec 2025; possible exfiltration was seen on 13 Dec and, after review, emails and hashed passwords were confirmed leaked in a January 21, 2026 notice.
Possible data leak: After finding encrypted servers on January 12 and judging it ransomware, the firm issued a first notice on January 16 and updates on March 10 and April 6.
After card-brand alerts the store was stopped and disclosed on January 16; a April 27 update said payment-page tampering may have leaked purchaser data for 25 Mar 2021–8 Nov 2024.