SHINDO3

Mazda Motor Corporation

Personal data692records

LEAK CONFIRMEDFull name / Email addressUnauthorized access · Closed (final report)

Open in the live monitor ▶
Disclosed
Mar 19, 2026
Leak
Leak confirmed
Type
Unauthorized access
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

Account dataUser IDs issued by Mazda, Business partner IDs
IdentityFull name
ContactEmail address
Employment & HRCompany name

Not leaked

  • General customer data

How many

  • Personal data of employees of Mazda, group companies and business partners 692 records

Who is affected

  • Employees of Mazda and group companies
  • Employees of business partners

Cause

A security weakness in an internet-connected warehouse-management system was exploited

Timeline

  1. Unauthorized access in mid-December 2025
  2. Announced

Response

  • Forensic investigation

Investigated and remediated together with outside specialist organizations

What you should do

  1. Don't open links in emails from this company. The apology email itself may be fake
  2. Expect targeted phishing posing as HR or interview contacts
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources