SHINDO2
CSM Inc.
Unauthorized accessSize not disclosed
LEAK UNCLEARInvestigating
Open in the live monitor ▶- Disclosed
- Jul 24, 2026
- Leak
- Unknown
- Type
- Unauthorized access
- Status
- Investigating
- Security spend
- Measures, no amount
- Compensation
- Not announced
Cause
Unauthorized third-party access to the company's network. Cybersecurity-jp.com reported it as unauthorized access to a FortiGate device
Timeline
- First disclosure
- Second report (PDF dated July 28)
Response
- Forensic investigation
Forensic investigation of PCs and servers. Detailed investigation of the main server continues, with interim results expected the week of August 10 and a final report at the end of August
What you should do
- Check the company's notice to see if you're affected
Lessons for companies
- Patch internet-facing servers, VPNs and admin panels first. Exploits follow disclosure within days
- Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
- Run red teaming and AI-assisted hardening, and publish how much you invest
Sources
- CSM Inc. Official notice · Jul 24, 2026
- CSM Inc. (second report) Official notice · Jul 28, 2026
- Cybersecurity-jp.com News · Jul 31, 2026