SHINDO4

At Home

Customer personal records408records

POSSIBLE LEAKBank account / Postal addressAccount takeover · Investigating

Open in the live monitor ▶
Disclosed
Feb 12, 2026
Detected
Jan 22, 2026
Detection to disclosure
21 days
Leak
Leak possible
Type
Account takeover
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityName
ContactAddress, Phone number, Email address
Business dataTrade name and real estate license number, Contact person name
Financial & paymentBank account details

How many

  • Customer personal records 408 records
  • Business partner registrations 14 records
  • Member real estate company records 315 records

Who is affected

  • People who requested moving estimates
  • Business partners
  • Member real estate companies

Cause

The moving-estimate management system was accessed without authorization and a third party logged in

Timeline

  1. Detected
  2. Security NEXT report date

What you should do

  1. Scammers who know your account number pose as refund staff. No bank or company asks for your PIN
  2. Don't open links in emails from this company. The apology email itself may be fake
  3. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  4. Watch for unexpected mail or invoices; your address is hard to change
  5. Check the company's notice to see if you're affected

Lessons for companies

  1. Don't keep ID or bank data: delete after checks or use a KYC provider
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources