SYLA Holdings Co., Ltd. said on 14 May 2026 that some customer personal data managed by its group had leaked, and that the direct cause was unauthorized access to an external cloud service used by the group and operated by ielove GROUP [1]. The types of data confirmed to have leaked include email addresses, phone numbers, addresses, gender, dates of birth, occupation, annual income, stated housing preferences, and part of correspondence with customers; the company said the investigation did not confirm leaks of credit-card data, Individual Numbers, or special-care personal information [1]. The company says people whose data leaked will be contacted individually by ielove GROUP; anyone who has not been contacted or is unsure whether they are in scope should call ielove GROUP at 0120-962-963 (weekdays 9:45–19:00) or use its form, and should be cautious of unexpected phone calls and email [1][2].
SYLA Holdings confirms some customer data leaked from a contracted cloud service
1 min read
- Disclosed
- May 14, 2026
- Occurred
- Apr 5, 2026
- Published
- Nov 12, 2026
- Last updated
- Nov 12, 2026
- CVSS basis
- Our assessment
- Exploitation and patch status
- Exploited
- Technology
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Professional services
What to do nowOur advice
- If you have not heard from ielove GROUP, or are unsure whether you are in scope, call 0120-962-963 (weekdays 9:45–19:00) or use the form .
Timeline
Technical details
Remediation
References
Official / primary2
- [1]株式会社シーラホールディングス2026-05-14Accessed 2026-11-11Snapshot 2026-11-12 sha256 f18d182588e9
“本件は、当社グループが利用する外部クラウドサービス(運営元:株式会社いえらぶGROUP)への不正アクセスを直接の原因とするものです。”
- [2]株式会社いえらぶGROUP2026-04-30Accessed 2026-11-11Snapshot 2026-11-12 sha256 7e3e4b486e4a
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.