According to Security NEXT, Doutor Coffee detected a system intrusion on October 20, 2026, potentially exposing personal data of current and former employees [1]. The scope covers 951 individuals across four stores in Tokyo and may include names, addresses, phone numbers, dates of birth, and bank account numbers [1]. The company has implemented measures to prevent further damage, launched an investigation, reported the matter to the Personal Information Protection Commission, and is contacting affected employees individually [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
HighMonitoringMedia reported
Employee Data at Four Doutor Coffee Stores Potentially Exposed, Affecting 951 Individuals and Bank Account Numbers
1 min read
- Disclosed
- Oct 29, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 10, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Hospitality & food service
What to do nowOur advice
The company has implemented measures to prevent further damage, launched an investigation, reported the matter to the Personal Information Protection Commission, and is contacting affected employees individually [1]
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
- Doutor official update: possibly leaked items now include employee numbers, nationality and guardian data[2]
Doutor Coffee published an updated notice on November 6: those affected are still 951 current and former employees of four stores, and in addition to names, birth dates, addresses, email addresses, phone numbers and bank account numbers, possibly leaked items now also include employee numbers, gender, nationality and bank account information, plus employment terms, work information, social insurance status and guardian names, relationships and addresses for some; the company says it has not confirmed unauthorized access to customer data and has found no secondary damage.
Technical details
Source-Verified Summary
Doutor Coffee detected a system intrusion on October 20, 2026, potentially exposing personal data of current and former employees. [1]
The scope covers 951 individuals across four stores in Tokyo and may include names, addresses, phone numbers, dates of birth, and bank account numbers. [1]
The company has implemented measures to prevent further damage, launched an investigation, reported the matter to the Personal Information Protection Commission, and is contacting affected employees individually. [1]
References
Official / primary1
- [2]
“【追加項目】従業員番号、性別、国籍情報、雇用条件（*）、就労情報（*）、社会保険状況（*）、 保護者情報＜氏名・続柄・住所＞（*）、銀行口座情報”
Media1
- [1]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.