Japanese indoor golf school operator Step Golf said in a second notice on Nov 10 that it was accessed without authorization on Oct 23 and 25, and database backup files containing personal data were very likely leaked [1]. Possibly leaked data includes 114,605 personal records, 107,781 member face photos and 12,707 bank account records, with the bank account data stored unencrypted [1]. Its first notice on Nov 7 said abnormal processing was detected on Nov 5, and the company has reported to the Personal Information Protection Commission and consulted police [2][1].
Japanese indoor golf school Step Golf database backups likely taken; over 110,000 member records and unencrypted bank account data may be exposed
1 min read
- Disclosed
- Nov 7, 2026
- Occurred
- Oct 23, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 114,605 records[1]
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
Timeline
Technical details
Remediation
Vendor guidance
- 1Check bank accounts for unknown debits detect[1]
Direct-debit members should watch for unexpected debits and scams using account details.
References
Official / primary2
- [1]
“なお、銀行口座情報は暗号化されていない状態で保管されておりました。”
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.