In a second report on 12 November, Raksul said a third party obtained credentials for its systems and, from about 03:00 on 7 November to about 01:00 on 8 November, could access data the company stored in the cloud within that authority; it revoked the credentials at about 01:00 on 8 November [1]. Using storage statistics, it treated data that may have been read as possibly leaked, including up to 249 print files uploaded through Raksul’s Adobe Express integration from March 2025 to 8 November 2026, which may contain names, company names, addresses, phone numbers and email addresses; the file count is not a person count. It said direct-mail address lists and other group services were out of scope, it does not hold credit-card data, and it had not found unauthorized access to the login-ID and password database [1]. It said it had not confirmed secondary harm, but asked customers to be careful with emails, SMS or calls impersonating the company or a partner, not to open URLs in those messages even if they mention an order or a bill, and to check the official website instead; it will not ask for a password or card number by email or SMS unless the customer started the process [1].
MediumMonitoringOfficially confirmed
Raksul says unauthorized access may have been used to read up to 249 print files; official notice warns against unexpected links
1 min read
- Disclosed
- Nov 9, 2026
- Occurred
- Nov 7, 2026
- Published
- Nov 12, 2026
- Last updated
- Nov 12, 2026
- CVSS basis
- Our assessment
- Attack vector
- Credential abuse
- Actor type
- Unknown
- Motivation
- Unknown
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Professional services
What to do nowOur advice
- Be careful with emails, SMS or calls impersonating Raksul or a partner; even if they mention an order or a bill, do not open the URL, and check the official website instead [1].
- Unless you started the process yourself on the site, the company will not ask for a password or credit-card number by email or SMS [1].
- For questions, submit the official form and choose the personal-information counseling desk (https://corp.raksul.com/contact/) [1].
Timeline
Technical details
Remediation
Vendor guidance
- 1Do not open URLs in unexpected messages; check orders on the official site mitigate[1]
Even if a message mentions an order or a bill, do not open its URL; check the official website. The company will not email you unsolicited requests for a password or card number.
References
Official / primary1
- [1]ラクスル株式会社2026-11-12Accessed 2026-11-12Snapshot 2026-11-12 sha256 c52e387564cc
“記載されたURLにはアクセスせず、当社のWebサイトから直接ご確認ください”
Expert help
Still not sure whether this affects you?
Tell us about your environment. We'll check it against this advisory, assess the risk, and give you concrete patch and monitoring steps.
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.