SHINDO4

Canet Co., Ltd.

Registered My Page users9,987people

POSSIBLE LEAKBank account / Postal addressUnauthorized access · Investigating

Open in the live monitor ▶
Disclosed
Apr 24, 2026
Detected
Apr 23, 2026
Detection to disclosure
1 day
Leak
Leak possible
Type
Unauthorized access
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name
ContactAddress
Employment & HREmployer
Financial & paymentFinancial institution information

Not leaked

  • Login password

How many

  • Registered My Page users 9,987 people

Who is affected

  • People registered on My Page

Cause

A third party gained unauthorized access to the company website

Timeline

  1. Unauthorized access detected
  2. Official announcement

Response

  • Notified individuals

Strengthened security of the affected system, identified the scope of damage and contacted affected people individually

What you should do

  1. Scammers who know your account number pose as refund staff. No bank or company asks for your PIN
  2. Watch for unexpected mail or invoices; your address is hard to change
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Don't keep ID or bank data: delete after checks or use a KYC provider
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources