16 results
Japan's Cyber Security Cloud says a tip from an external organization revealed that one employee's work GitHub credential had leaked, and on Nov 5 access logs showed suspicious past access apparently by a third party using it .
SMBC Nikko Securities announced on 11 November that the stock-ownership-association management system it uses for outsourced plan administration was accessed by a third party, and personal data of some members was confirmed leaked .
NTT Data announced on Nov 9 that the sign-up service for Sumitomo Life's standalone Vitality programs, which it builds and operates under contract, was accessed by a third party and personal data of about 80,000 users leaked .
MS&AD group insurers Mitsui Sumitomo Insurance and Aioi Nissay Dowa said on Nov 6 that unauthorized access to their policyholder portal was detected on the night of Nov 2, related services were halted late on Nov 3, and the investigation confirmed a data leak .
Kyocera Communication Systems (KCCS) issued a second update on November 6 stating that a web server operated by its subsidiary MOTEX suffered unauthorized access, potentially exposing customer information including company names, personal names, email addresses, and phone numbers .
PayCloud Holdings subsidiary Arara said its email delivery service Arara Message suffered unauthorized access; it first disclosed the incident on Oct 29, and its Nov 6 third report put the deduplicated number of taken (or possibly taken) email addresses at 81,329,467 .
According to Security NEXT, Giftee Group announced that its subsidiary Giftee suffered unauthorized access exploiting a system vulnerability on October 25, 2026, resulting in a third party illicitly issuing electronic gift vouchers .
GMO Internet said that on October 20 it confirmed a third party had planted a malicious program on some customer servers of its Onamae.
SourceNext said on 15 October that third-party unauthorized access to the member data it manages had leaked personal information of registered customers .
According to Impress Watch, Japanese software maker Sourcenext announced on October 15 that a third party gained unauthorized access and that 22,519,960 customer records may have leaked .
Japanese cloud provider IDC Frontier said on October 7 that an outage in its IDCF Cloud East Japan Region 1 starting at about 3:40 a.
Japan's Helpfeel said on September 16 that a third party exploited a vulnerability in the image upload server of its screenshot-sharing service Gyazo on September 11 to run arbitrary commands, then accessed the database and exfiltrated user data and image metadata .
Japanese cloud and hosting provider Sakura Internet said in its third report on September 10 that it detected an anomaly on a maintenance server for its rental server service on August 9, and found unauthorized access to rental servers with malware planted, affecting 951 accounts .
The Japanese crowdfunding platform CAMPFIRE said on 24 April 2026 that personal data may have leaked from part of the systems that manage customer information, affecting 225,846 unique users, and that credit-card data is not included .
According to Security NEXT, the Japan Consumer Credit Association surveyed 40 member companies and reported credit card fraud losses of approximately 10.
According to Security NEXT, Mynavi subsidiary 444 announced that a development server for its TechFUL service was breached in December 2024, potentially exposing personal information of contractors and users .