SHINDO3

DAIKO XTECH Co., Ltd.

Account takeoverSize not disclosed

LEAK UNCLEARPasswordClosed (final report)

Open in the live monitor ▶
Disclosed
Aug 19, 2026
Leak
Unknown
Type
Account takeover
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

CredentialsPasswords

Who is affected

  • Employees

Cause

Email accounts on the daiko-b.co.jp domain were accessed by a third party and passwords stolen; the cause was reported as under investigation

Timeline

  1. First report
  2. Old-domain mail server fully shut down
  3. Final report

Response

  • Service stopped
  • Revoked credentials

Temporarily stopped the email system to check it, shut the old-domain mail server on August 24 and moved all staff to a new email environment

What you should do

  1. Change this password and every account that reused it now. Switch to a passkey where offered
  2. Expect targeted phishing posing as HR or interview contacts
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources