SHINDO2

Iwatani Corporation

Unauthorized accessSize not disclosed

LEAK UNCLEARInvestigating

Open in the live monitor ▶
Disclosed
Mar 16, 2026
Detected
Mar 16, 2026
Detection to disclosure
Same day
Leak
Unknown
Type
Unauthorized access
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

UnspecifiedCustomer personal data (no unauthorized retrieval confirmed so far)

Who is affected

  • Customers

Cause

Unauthorized access by a third party; entry route not disclosed

Timeline

  1. Unauthorized access by a third party confirmed
  2. Announced

Response

  • Forensic investigation

Set up an internal response team with outside security specialists and investigated the scope

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources