调查中
Universal Plant Services: personal data may have been in accessed network data
Possible data leak: An unauthorised individual accessed data within the network from June 8 to 12, 2026; the data may include names with SSNs and other elements.
企业数据泄露与未经授权访问事件列表
按企业、国家、行业、发生年份和攻击方式查询事件，了解泄露数据、影响范围、核实状态、企业应对及来源。
调查中
RIZAP APORITO: malicious script may have exfiltrated orderers’ personal and card data
Malicious outbound script found in APORITO store on Aug 5, 2026; site closed same day. Possible exposure of May 1–Aug 5, 2026 orderers’ name/address/phone/email and card number/expiry/CVV; card-affected customers emailed Aug 8; disclosed Aug 10.
调查中
Godai Isabou Net: server intrusion may have exposed members’ names and passwords
Unauthorized access to the Isabou Net server confirmed Jan 26, 2026. Expert review found member name/email/login password/company/address/phone may have been viewed or obtained, discovered July 27; disclosed Aug 10.
调查中
Kovack Financial: personal data in files may have been accessed
An unknown actor accessed files within the network between August 8 and 27, 2025; on July 16, 2026 personal information was found in files that may have been accessed.
调查中
Nissan Foundation: website intrusion may have exposed form users’ names and emails
Website intrusion/defacement found June 16, 2026 and the site was taken down. No exfiltration traces found, but data may have been viewable for a period; possible exposure of pre-2026-06-16 form submissions (name, kana, email, inputs) disclosed Aug 10 (unauthorized-access notice itself was posted July 13).
调查中
Boston Health Care for the Homeless Program: files may have been accessed
Investigation of a network disruption first learned of on November 11, 2025 found files may have been accessed or acquired; on June 8, 2026 patients’ or employees’ personal information was found in them.
已确认
Digital Agency: login-history file sent to another ministry wrongly included data on 150 licensing-body staff
On July 6, 2026 a National Qualifications system login-history file sent to another ministry wrongly included name, user ID and affiliation codes for 150 staff of other licensing bodies due to ambiguous procedure wording; recipient did not forward and deleted it; disclosed Aug 7.
已确认
PMDA: lost work USB exposed personal data on 286 consultation-related contacts
A loaned work USB was found missing on April 16, 2026 and remains unfound. It may have held conference materials plus non-public consultation files and personal data (affiliation/name, etc.; no sensitive personal data). Device is password-locked after repeated failures; disclosed Aug 7.
调查中
JST: staff mailbox intrusion may have leaked stored email contents
After an external tip on July 28, 2026, investigation found stored mail in some officers’ mailboxes may have leaked; disclosed Aug 7 (counts refined Aug 28).
已确认
Sapporo Toyohira: winter road-closure page wrongly posted residential-map names (259 entries)
When updating Toyohira Public Works’ winter road-closure page, staff wrongly used internal-only residential map data, posting household names from 2025-11-18 until discovery on 2026-05-28; posting stopped same day; disclosed Aug 7.
调查中
Ichimasa: employee mailbox intrusion may have exposed partner and staff personal data
On Aug 5, 2026 an employee mailbox was intruded and partner/staff personal data in it may have been viewed; containment same day; disclosed Aug 6.
调查中
Loginet Japan: Fuso Dentsu cloud intrusion may have leaked Yukinomizu customer/partner data
Possible data leak: Vendor Fuso Dentsu’s cloud share used for Yukinomizu sales-admin work was intruded on July 15, 2026; personal-data exposure risk reported to Loginet on July 31; disclosed Aug 6. Scope is 2023 May/Oct work data, not the live sales system.
调查中
Hamill & Kaplan: sensitive data may have been accessed in network intrusion
On September 19, 2025, the firm discovered that an unauthorised user had accessed its network earlier that day; Social Security numbers, other government ID numbers, names and bank account information may have been accessed.
已确认
Ambition DX Holdings: business documents stolen in ransomware attack; about 580,000 personal records possibly exposed
In the early hours of August 6, 2026, attackers entered via a network device, took business documents from group servers and devices, and deployed ransomware. The first report was published the same day.
已确认
Ace & Tate customer order data copied from logistics provider CEVA
Ace & Tate initially warned customers of possible exposure on August 6; CEVA confirmed access and copying of personal data on September 10.
调查中
Le Ange: intrusion into work chat tool BAND may have exposed member and staff personal data
Possible data leak: An incident on work tool BAND occurred July 10, 2026 and was recognized as unauthorized access on July 15. Some members and staff (name, DOB, address, phone, email, etc.) were in scope; individuals notified by Aug 5; disclosed Aug 6. Cards, bank accounts and My Number not handled on BAND.
调查中
NICE: mailbox intrusion may have leaked about 2,400 personal-data records
Suspicious activity on managed mailbox info@e-house.co.jp on July 22, 2026 led to lockout and investigation. Possible leak of name/email/phone/company name/address disclosed Aug 6. Aug 21 update confirmed spam misuse of the account.
已确认
Akita NCT: faculty external HDD loss left data on 699 students and others unaccounted for
An external HDD left on a faculty desk was found missing on June 15, 2026 (taken out in early April for migration). It held FY2023–2024 grades, exams, attendance, guidance notes, etc.; disclosed Aug 5.
调查中
Kyodo News: account misuse may have exposed staff and member-company contacts
On Aug 4, 2026 an external tip indicated some staff accounts in the mail/work environment may have been misused; disclosed Aug 5. No impact on core news/editing systems.
调查中
Tokai University: Yamanakako seminar-house booking site compromise may have leaked 274 users’ data
Defacement of the Yamanakako seminar-house booking site was found April 22, 2026 and attributed to likely unauthorized access. Possible leakage of booking users from 2022-05-09 to 2026-04-22 disclosed Aug 5.