SHINDO3
cocoloni
Unauthorized accessSize not disclosed
LEAK CONFIRMEDEmail address / PasswordClosed (final report)
Open in the live monitor ▶- Disclosed
- Jan 21, 2026
- Detected
- Dec 13, 2025
- Detection to disclosure
- 39 days
- Leak
- Leak confirmed
- Type
- Unauthorized access
- Status
- Closed (final report)
- Security spend
- Not checked yet
- Compensation
- Not announced
What leaked
ContactEmail address
CredentialsEncrypted passwords (in a form that is extremely difficult to decrypt)
Who is affected
- Customers
Cause
Systems managed by the company were attacked from outside
Timeline
- Intrusion began
- Intrusion stopped
- Became aware of a possible leak
- Reported to authority
- First disclosure
Response
- Phishing warning
- Governance / committee
Strengthened system security and reviewed personal-data management and auditing; warned users to beware of unexpected emails
What you should do
- Change this password and every account that reused it now. Weak passwords crack even when hashed or encrypted. Switch to a passkey where offered
- Don't open links in emails from this company. The apology email itself may be fake
- Check the company's notice to see if you're affected
Lessons for companies
- Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
- Run red teaming and AI-assisted hardening, and publish how much you invest
Sources
- Security NEXT News · Jan 23, 2026
- Security Measures Lab Researcher · Jan 21, 2026