Dentsu Digital announced on Nov 11 that an admin account used in the infrastructure of its TONARIWA marketing platform was accessed by a third party after its credentials leaked, with privileges escalated, and the service was suspended [1]. Data that may have leaked includes names, birth dates and contact details of some client companies' end users, plus admin account data including LINE official account integration access tokens, and the company cannot rule out unauthorized message sending [1]. Japan Post said its LINE account "Post Office [Posukuma]", operated with Dentsu Digital, was affected and has been under emergency maintenance since 14:20 on Nov 11 [2].
Dentsu Digital marketing platform TONARIWA breached via stolen admin credentials; LINE tokens may be exposed and Japan Post suspends LINE account
1 min read
- Disclosed
- Nov 11, 2026
- Occurred
- Nov 10, 2026
- Published
- Nov 12, 2026
- Last updated
- Nov 12, 2026
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Transportation & logistics, Professional services
What to do nowOur advice
Japan Post said its LINE account "Post Office [Posukuma]", operated with Dentsu Digital, was affected and has been under emergency maintenance since 14:20 on Nov 11 [2]
Timeline
Technical details
Remediation
Vendor guidance
- 1Reissue LINE integration tokens mitigate[1]
TONARIWA client companies should reissue and switch LINE official account integration tokens as instructed.
References
Official / primary2
- [1]電通デジタル2026-11-11Accessed 2026-11-11Snapshot 2026-11-12 sha256 87d3c0aebc36
“認証情報の漏えいに起因する第三者からの不正アクセスおよび権限昇格(操作範囲の拡大)が行われていた事実を確認いたしました。”
- [2]日本郵便2026-11-11Accessed 2026-11-11Snapshot 2026-11-12
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.