調查中
Universal Plant Services: personal data may have been in accessed network data
Possible data leak: An unauthorised individual accessed data within the network from June 8 to 12, 2026; the data may include names with SSNs and other elements.
資料外洩事件
依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
調查中
RIZAP APORITO: malicious script may have exfiltrated orderers’ personal and card data
Malicious outbound script found in APORITO store on Aug 5, 2026; site closed same day. Possible exposure of May 1–Aug 5, 2026 orderers’ name/address/phone/email and card number/expiry/CVV; card-affected customers emailed Aug 8; disclosed Aug 10.
調查中
Godai Isabou Net: server intrusion may have exposed members’ names and passwords
Unauthorized access to the Isabou Net server confirmed Jan 26, 2026. Expert review found member name/email/login password/company/address/phone may have been viewed or obtained, discovered July 27; disclosed Aug 10.
調查中
Kovack Financial: personal data in files may have been accessed
An unknown actor accessed files within the network between August 8 and 27, 2025; on July 16, 2026 personal information was found in files that may have been accessed.
調查中
Nissan Foundation: website intrusion may have exposed form users’ names and emails
Website intrusion/defacement found June 16, 2026 and the site was taken down. No exfiltration traces found, but data may have been viewable for a period; possible exposure of pre-2026-06-16 form submissions (name, kana, email, inputs) disclosed Aug 10 (unauthorized-access notice itself was posted July 13).
調查中
Boston Health Care for the Homeless Program: files may have been accessed
Investigation of a network disruption first learned of on November 11, 2025 found files may have been accessed or acquired; on June 8, 2026 patients’ or employees’ personal information was found in them.
已確認
Digital Agency: login-history file sent to another ministry wrongly included data on 150 licensing-body staff
On July 6, 2026 a National Qualifications system login-history file sent to another ministry wrongly included name, user ID and affiliation codes for 150 staff of other licensing bodies due to ambiguous procedure wording; recipient did not forward and deleted it; disclosed Aug 7.
已確認
PMDA: lost work USB exposed personal data on 286 consultation-related contacts
A loaned work USB was found missing on April 16, 2026 and remains unfound. It may have held conference materials plus non-public consultation files and personal data (affiliation/name, etc.; no sensitive personal data). Device is password-locked after repeated failures; disclosed Aug 7.
調查中
JST: staff mailbox intrusion may have leaked stored email contents
After an external tip on July 28, 2026, investigation found stored mail in some officers’ mailboxes may have leaked; disclosed Aug 7 (counts refined Aug 28).
已確認
Sapporo Toyohira: winter road-closure page wrongly posted residential-map names (259 entries)
When updating Toyohira Public Works’ winter road-closure page, staff wrongly used internal-only residential map data, posting household names from 2025-11-18 until discovery on 2026-05-28; posting stopped same day; disclosed Aug 7.
調查中
Ichimasa: employee mailbox intrusion may have exposed partner and staff personal data
On Aug 5, 2026 an employee mailbox was intruded and partner/staff personal data in it may have been viewed; containment same day; disclosed Aug 6.
調查中
Loginet Japan: Fuso Dentsu cloud intrusion may have leaked Yukinomizu customer/partner data
Possible data leak: Vendor Fuso Dentsu’s cloud share used for Yukinomizu sales-admin work was intruded on July 15, 2026; personal-data exposure risk reported to Loginet on July 31; disclosed Aug 6. Scope is 2023 May/Oct work data, not the live sales system.
調查中
Hamill & Kaplan: sensitive data may have been accessed in network intrusion
On September 19, 2025, the firm discovered that an unauthorised user had accessed its network earlier that day; Social Security numbers, other government ID numbers, names and bank account information may have been accessed.
已確認
Ambition DX Holdings: business documents stolen in ransomware attack; about 580,000 personal records possibly exposed
In the early hours of August 6, 2026, attackers entered via a network device, took business documents from group servers and devices, and deployed ransomware. The first report was published the same day.
已確認
Ace & Tate customer order data copied from logistics provider CEVA
Ace & Tate initially warned customers of possible exposure on August 6; CEVA confirmed access and copying of personal data on September 10.
調查中
Le Ange: intrusion into work chat tool BAND may have exposed member and staff personal data
Possible data leak: An incident on work tool BAND occurred July 10, 2026 and was recognized as unauthorized access on July 15. Some members and staff (name, DOB, address, phone, email, etc.) were in scope; individuals notified by Aug 5; disclosed Aug 6. Cards, bank accounts and My Number not handled on BAND.
調查中
NICE: mailbox intrusion may have leaked about 2,400 personal-data records
Suspicious activity on managed mailbox info@e-house.co.jp on July 22, 2026 led to lockout and investigation. Possible leak of name/email/phone/company name/address disclosed Aug 6. Aug 21 update confirmed spam misuse of the account.
已確認
Akita NCT: faculty external HDD loss left data on 699 students and others unaccounted for
An external HDD left on a faculty desk was found missing on June 15, 2026 (taken out in early April for migration). It held FY2023–2024 grades, exams, attendance, guidance notes, etc.; disclosed Aug 5.
調查中
Kyodo News: account misuse may have exposed staff and member-company contacts
On Aug 4, 2026 an external tip indicated some staff accounts in the mail/work environment may have been misused; disclosed Aug 5. No impact on core news/editing systems.
調查中
Tokai University: Yamanakako seminar-house booking site compromise may have leaked 274 users’ data
Defacement of the Yamanakako seminar-house booking site was found April 22, 2026 and attributed to likely unauthorized access. Possible leakage of booking users from 2022-05-09 to 2026-04-22 disclosed Aug 5.