SHINDO3

Kyodo News

Personal data~6,000records

POSSIBLE LEAKMessages / email bodies / Full nameAccount takeover · Investigating

Open in the live monitor ▶
Disclosed
Aug 6, 2026
Detected
Aug 4, 2026
Detection to disclosure
2 days
Leak
Leak possible
Type
Account takeover
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name
ContactEmail address
Employment & HRDepartment name, Job title
Communications & contentEmails and files stored in the possibly misused accounts

How many

  • Approx. 3,000 staff records and approx. 3,000 member-company and partner records ~6,000 records

Who is affected

  • Staff and others
  • Member companies, business partners and others

Cause

Some staff accounts are suspected to have been misused by a third party

Timeline

  1. Detected
  2. First disclosure

Response

  • Forensic investigation

What you should do

  1. Don't open links in emails from this company. The apology email itself may be fake
  2. Expect targeted phishing posing as HR or interview contacts
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources