SHINDO2

Tokyo Metropolitan Small and Medium Enterprise Support Center

Unauthorized accessSize not disclosed

LEAK UNCLEARInvestigating

Open in the live monitor ▶
Disclosed
Jul 31, 2026
Leak
Unknown
Type
Unauthorized access
Status
Investigating
Security spend
Measures, no amount
Compensation
Not announced

Who is affected

  • Site users

Cause

Unauthorized access to a program website run by a contractor (details not disclosed)

Timeline

  1. First disclosure

Response

  • Service stopped
  • Forensic investigation
  • Vendor review

Site operations partly suspended; investigating with the contractor, relevant agencies and experts

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Put security requirements, audit rights and reporting deadlines in vendor contracts
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources