SHINDO2

ROHTO Pharmaceutical

rohto.co.jp

Unauthorized accessSize not disclosed

POSSIBLE LEAKCall recordings / Metadata (EXIF, OCR, logs)Investigating

Open in the live monitor ▶
Disclosed
Sep 11, 2026
Detected
Sep 10, 2026
Detection to disclosure
1 day
Leak
Leak possible
Type
Unauthorized access
Status
Investigating
Security spend
Measures, no amount
Compensation
Not announced
Corporate number
6120001019253

What leaked

Communications & contentAudio recordings of calls with customers, Call-related information
UnspecifiedCustomer information in the customer management system

Who is affected

  • Mail-order customers

Cause

Unauthorized access by a third party (intrusion route and cause not disclosed / under investigation)

Timeline

  1. Detected
  2. First disclosure
  3. Company issued an update

Response

  • Forensic investigation
  • More monitoring
  • Access review
  • Phishing warning

Investigation with outside experts, necessary security measures, continuous monitoring. Warnings about suspicious calls, emails and SMS

What you should do

  1. Call audio leaked. Watch for impersonation using your voice and agree a code word with family
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources