According to Security NEXT, Kawamoto Pump Mfg. Co., Ltd. announced that its website contact form was compromised by a third party, resulting in the external leakage of submitted data [1]. The affected scope covers 2,545 entries submitted between February 2017 and May 2019; the report was disclosed in 2025 rather than indicating entries made that year [1]. The company has reported the incident to police and the Personal Information Protection Commission, confirmed no secondary damage so far, and will strengthen protection and monitoring [1].
Kawamoto Pump Website Contact Form Compromised, Exposing 2,545 Historical Entries
1 min read
- Disclosed
- Dec 26, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Manufacturing
What to do nowOur advice
The company has reported the incident to police and the Personal Information Protection Commission, confirmed no secondary damage so far, and will strengthen protection and monitoring [1].
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Verified Source Summary
Kawamoto Pump Mfg. Co., Ltd. announced that its website contact form was compromised by a third party, resulting in the external leakage of submitted data [1].
The affected scope covers 2,545 entries submitted between February 2017 and May 2019; the report was disclosed in 2025 rather than indicating entries made that year [1].
The company has reported the incident to police and the Personal Information Protection Commission, confirmed no secondary damage so far, and will strengthen protection and monitoring [1].
References
Media1
- [1]
“ポンプメーカーの川本製作所は、ウェブサイトに設置されている問い合わせフォームに入力された情報が外部へ流出したことを明らかにした。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.