{ "schemaVersion": "1.0.0", "id": "domestic-20261009", "receivedAt": "2026-10-09", "reviewedAt": "2026-10-09", "year": 2026, "yearProvenance": "user-confirmed-2026", "originalSourceUrl": null, "description": { "ja": "利用者提供の169候補を全行照合した確認台帳です。一次資料が未取得の候補は未確認として残し、件数・日付の原文と確認済みの主張を分けています。", "en": "Review ledger covering all 169 user-supplied candidates. Unavailable primary evidence remains unresolved; original counts and dates are separate from verified claims." }, "records": [ { "id": "U2026-001", "organization": "損保ジャパン", "supplied": { "date": "2026-10-07", "dateMeaning": "unverified", "count": { "text": "約6万件", "value": 60000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "scala-iask-2026" ], "verified": { "summary": { "ja": "約6万は人数ではなく、重複を含む延べ問い合わせ件数です。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-05", "sourceUrls": [ "https://www.sompo-japan.co.jp/-/media/SJNK/files/news/2026/20261007_1.pdf?la=ja-JP", "https://scala-com.jp/news/2026/10-1/", "https://ssl4.eir-parts.net/doc/8601/tdnet/2891437/00.pdf", "https://www.citizen.co.jp/release/news/detail/2026/20261006.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "i-askの管理画面に不正ログインし、不正プログラムが設置されました。", "en": "Unauthorized administrator login was followed by installation of a program." }, "locator": "1. 漏えいの経緯", "sourceUrls": [ "https://scala-com.jp/news/2026/10-1/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "同一サーバーの最大5社、最大713,126件の延べ問い合わせ情報に漏えいの可能性があります。", "en": "Potential exposure spans up to five customers and 713,126 non-deduplicated inquiries." }, "locator": "2. 漏えいした可能性のある情報", "sourceUrls": [ "https://scala-com.jp/news/2026/10-1/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "大和証券は約11万人の情報、識別できない問い合わせも含め約22万件への影響の可能性を公表しました。", "en": "Daiwa reported potential exposure affecting about 110,000 people and about 220,000 inquiries including unidentifiable records." }, "locator": "p.2 §2", "sourceUrls": [ "https://ssl4.eir-parts.net/doc/8601/tdnet/2891437/00.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "シチズン時計は約10万人、損保ジャパンは約6万件の延べ問い合わせへの影響の可能性を公表しました。", "en": "Citizen reported about 100,000 people; Sompo reported about 60,000 inquiries. Both describe possible exposure." }, "locator": "シチズン §漏えいの可能性がある情報 / 損保ジャパン §2", "sourceUrls": [ "https://www.citizen.co.jp/release/news/detail/2026/20261006.html", "https://www.sompo-japan.co.jp/-/media/SJNK/files/news/2026/20261007_1.pdf?la=ja-JP" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-002", "organization": "HIS", "supplied": { "date": "2026-10-07", "dateMeaning": "unverified", "count": { "text": "最大627人", "value": 627, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "his-thailand-2025" ], "verified": { "summary": { "ja": "検知は2025-12-11です。2026年の公表を2026年発生と読み替えません。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-07", "sourceUrls": [ "https://www.his.co.jp/assets/20261007.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "タイ法人のファイルサーバーへの不審なアクセスを確認しました。侵入方法は未公表です。", "en": "Suspicious file-server access was confirmed; the entry mechanism is undisclosed." }, "locator": "p.1 §1", "sourceUrls": [ "https://www.his.co.jp/assets/20261007.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大627名のパスポート情報とアレルギー情報が流出した可能性があります。", "en": "Passport and allergy data for up to 627 people may have been taken." }, "locator": "p.1 §2", "sourceUrls": [ "https://www.his.co.jp/assets/20261007.pdf" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-003", "organization": "旭化成セラピューティクス", "supplied": { "date": "2026-10-06", "dateMeaning": "unverified", "count": { "text": "約51万4,700人", "value": 514700, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "asahi-pharma-digital-2026" ], "verified": { "summary": { "ja": "医療関係者・メールアドレスを含む内数・従業員を分け、514,700人という一括値にしません。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-06", "sourceUrls": [ "https://www.asahi-kasei.co.jp/pharma/oshirase_20261006.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託先が会員DBへの不正アクセスを確認し、10月2日に報告しました。", "en": "The operator confirmed member-database access and reported it on October 2." }, "locator": "1. 概要", "sourceUrls": [ "https://www.asahi-kasei.co.jp/pharma/oshirase_20261006.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大対象は医療関係者約514,000名と従業員約700名です。前者のうち約44,000名にはメールアドレスも含まれます。", "en": "Potential maximum scope is about 514,000 medical professionals and 700 employees; about 44,000 of the former also have email data affected." }, "locator": "2. 漏えいした可能性がある情報", "sourceUrls": [ "https://www.asahi-kasei.co.jp/pharma/oshirase_20261006.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-01.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-004", "organization": "ミスターマックス", "supplied": { "date": "2026-10-06", "dateMeaning": "unverified", "count": { "text": "最大173万5,154人", "value": 1735154, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "mrmax-2026" ], "verified": { "summary": { "ja": "一部の流出は確認されていますが、全1,735,154人の流出が確定したという公表ではありません。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-06", "sourceUrls": [ "https://www.mrmax.co.jp/info/incident_20261006/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "サービスを構成するソフトウェアの機能を不正に利用して侵入されました。", "en": "The intruder abused functions of software composing the service." }, "locator": "1. 経緯", "sourceUrls": [ "https://www.mrmax.co.jp/info/incident_20261006/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大1,735,154人が対象です。住所・生年月日・カード情報・パスワード・購入履歴は流出していないと確認しています。", "en": "Potential scope is up to 1,735,154 people. MrMax confirmed addresses, birth dates, cards, passwords, and purchase histories were not leaked." }, "locator": "2. 情報流出の可能性がある対象のお客様および情報", "sourceUrls": [ "https://www.mrmax.co.jp/info/incident_20261006/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-01.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-005", "organization": "シチズン時計", "supplied": { "date": "2026-10-06", "dateMeaning": "unverified", "count": { "text": "約10万人", "value": 100000, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "scala-iask-2026" ], "verified": { "summary": { "ja": "スカラの同じ委託先事故へ対応付けます。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-05", "sourceUrls": [ "https://www.citizen.co.jp/release/news/detail/2026/20261006.html", "https://scala-com.jp/news/2026/10-1/", "https://ssl4.eir-parts.net/doc/8601/tdnet/2891437/00.pdf", "https://www.sompo-japan.co.jp/-/media/SJNK/files/news/2026/20261007_1.pdf?la=ja-JP" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "i-askの管理画面に不正ログインし、不正プログラムが設置されました。", "en": "Unauthorized administrator login was followed by installation of a program." }, "locator": "1. 漏えいの経緯", "sourceUrls": [ "https://scala-com.jp/news/2026/10-1/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "同一サーバーの最大5社、最大713,126件の延べ問い合わせ情報に漏えいの可能性があります。", "en": "Potential exposure spans up to five customers and 713,126 non-deduplicated inquiries." }, "locator": "2. 漏えいした可能性のある情報", "sourceUrls": [ "https://scala-com.jp/news/2026/10-1/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "大和証券は約11万人の情報、識別できない問い合わせも含め約22万件への影響の可能性を公表しました。", "en": "Daiwa reported potential exposure affecting about 110,000 people and about 220,000 inquiries including unidentifiable records." }, "locator": "p.2 §2", "sourceUrls": [ "https://ssl4.eir-parts.net/doc/8601/tdnet/2891437/00.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "シチズン時計は約10万人、損保ジャパンは約6万件の延べ問い合わせへの影響の可能性を公表しました。", "en": "Citizen reported about 100,000 people; Sompo reported about 60,000 inquiries. Both describe possible exposure." }, "locator": "シチズン §漏えいの可能性がある情報 / 損保ジャパン §2", "sourceUrls": [ "https://www.citizen.co.jp/release/news/detail/2026/20261006.html", "https://www.sompo-japan.co.jp/-/media/SJNK/files/news/2026/20261007_1.pdf?la=ja-JP" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-01.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-006", "organization": "楽天ドライブ", "supplied": { "date": "2026-10-06", "dateMeaning": "unverified", "count": { "text": "1万5,382アカウント", "value": 15382, "unit": "アカウント", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "rakuten-drive-2026" ], "verified": { "summary": { "ja": "対象情報と期間が異なる3事象の重複は未公表のため、合算しません。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-06", "sourceUrls": [ "https://support.rakuten-drive.com/hc/ja/articles/62934949147929" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "一部システムの管理用アカウントの認証情報を不正取得されました。", "en": "Credentials for an administrator account on part of the system were illicitly acquired." }, "locator": "概要", "sourceUrls": [ "https://support.rakuten-drive.com/hc/ja/articles/62934949147929" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "8月27日のアカウント情報は687件、パスワード加工値等を含む情報は313件です。1月29日〜9月17日の保存データは15,382アカウントが対象です。", "en": "August 27 events affected 687 accounts and 313 accounts including transformed passwords. Stored-data access during January 29–September 17 affected 15,382 accounts." }, "locator": "事象①〜③", "sourceUrls": [ "https://support.rakuten-drive.com/hc/ja/articles/62934949147929" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-01.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-007", "organization": "GMOリサーチ&AI", "supplied": { "date": "2026-10-06", "dateMeaning": "unverified", "count": { "text": "94万8,498件", "value": 948498, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "gmo-infoq-2026" ], "verified": { "summary": { "ja": "公表日は10月5日、対象は最大948,498件です。会社名にAIがあっても攻撃者のAI利用を意味しません。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-05", "sourceUrls": [ "https://gmo-research.ai/pressroom/notice/notice-20261005" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "サイトで使うソフトウェアの脆弱性を悪用されました。製品や修正時期は未公表です。", "en": "A site software vulnerability was exploited; product and patch timing are undisclosed." }, "locator": "5. 原因", "sourceUrls": [ "https://gmo-research.ai/pressroom/notice/notice-20261005" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "対象は最大948,498件です。611件・2,869,500円のポイント不正交換も確認しました。", "en": "Potential scope is up to 948,498 records. Unauthorized point redemptions involved 611 cases and ¥2,869,500." }, "locator": "3. 対象となる情報 / 4. ポイントの不正な交換", "sourceUrls": [ "https://gmo-research.ai/pressroom/notice/notice-20261005" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-008", "organization": "ニモカ", "supplied": { "date": "2026-10-06", "dateMeaning": "unverified", "count": { "text": "521人", "value": 521, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "nimoca-2026" ], "verified": { "summary": { "ja": "公式の単位は521件です。521人と読み替えません。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-06", "sourceUrls": [ "https://www.nimoca.jp/storage/files/information/107/20261006.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "公開Webサービスへの不正アクセスを確認しました。メールは攻撃者ではなくサービスから送信されました。", "en": "Unauthorized public-service access was confirmed. The service, not the attacker, sent the emails." }, "locator": "p.1 §2", "sourceUrls": [ "https://www.nimoca.jp/storage/files/information/107/20261006.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "カード番号・生年月日・メールアドレスの521件が対象です。氏名や利用履歴の流出は確認されていません。", "en": "Affected data comprises 521 records with card numbers, birth dates, and email addresses; name and usage-history leakage is unconfirmed." }, "locator": "p.1 §3 / p.2 §4", "sourceUrls": [ "https://www.nimoca.jp/storage/files/information/107/20261006.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-01.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-009", "organization": "ホワイトエッセンス", "supplied": { "date": "2026-10-05", "dateMeaning": "unverified", "count": { "text": "約105万アカウント", "value": 1050000, "unit": "アカウント", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "white-essence-2026" ], "verified": { "summary": { "ja": "予約サイトのプログラムの脆弱性を起点に、基幹システムへ不正アクセスされたと公表しています。 約105万アカウントの漏えいを確認しました。加盟院関係者・社員等も含む全体数です。", "en": "A reservation-site vulnerability enabled unauthorized access to the core system. Leakage affects about 1.05 million accounts, including clinic personnel and employees." }, "disclosedAt": "2026-08-12", "sourceUrls": [ "https://www.whiteessence.com/news/news/20261005/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "予約サイトのプログラムの脆弱性を起点に、基幹システムへ不正アクセスされたと公表しています。", "en": "A reservation-site vulnerability enabled unauthorized access to the core system." }, "locator": "画像本文 §§1-3,6（ブラウザで目視）", "sourceUrls": [ "https://www.whiteessence.com/news/news/20261005/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "約105万アカウントの漏えいを確認しました。加盟院関係者・社員等も含む全体数です。", "en": "Leakage affects about 1.05 million accounts, including clinic personnel and employees." }, "locator": "画像本文 §§1-3,6（ブラウザで目視）", "sourceUrls": [ "https://www.whiteessence.com/news/news/20261005/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-01.shtm" ], "attemptedSourceUrls": [ "https://www.whiteessence.co.jp/news/?action=detail&id=43", "https://www.whiteessence.co.jp/news/?action=detail&id=47", "https://www.whiteessence.com/news/news/20260812/", "https://www.whiteessence.com/news/news/20261005/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-010", "organization": "大起水産", "supplied": { "date": "2026-10-05", "dateMeaning": "unverified", "count": { "text": "17万4,933人", "value": 174933, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "daiki-suisan-2026" ], "verified": { "summary": { "ja": "アプリのシステムへの不正アクセスを9月15日に確認しました。具体的な侵入方法は未公表です。 登録者174,933人の情報に流出の可能性があります。パスワードは別サーバーで管理され、対象外です。", "en": "Unauthorized app-system access was detected on September 15; the specific mechanism is undisclosed. Potential exposure covers 174,933 registered users. Passwords were held on a separate server and were unaffected." }, "disclosedAt": "2026-10-05", "sourceUrls": [ "https://www.daiki-suisan.co.jp/files/optionallink/00000164_file.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "アプリのシステムへの不正アクセスを9月15日に確認しました。具体的な侵入方法は未公表です。", "en": "Unauthorized app-system access was detected on September 15; the specific mechanism is undisclosed." }, "locator": "p.1 §1 / p.2 §2", "sourceUrls": [ "https://www.daiki-suisan.co.jp/files/optionallink/00000164_file.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "登録者174,933人の情報に流出の可能性があります。パスワードは別サーバーで管理され、対象外です。", "en": "Potential exposure covers 174,933 registered users. Passwords were held on a separate server and were unaffected." }, "locator": "p.1 §1 / p.2 §2", "sourceUrls": [ "https://www.daiki-suisan.co.jp/files/optionallink/00000164_file.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [ "https://www.daiki-suisan.co.jp/files/optionallink/00000164_file.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-011", "organization": "大阪公立大学", "supplied": { "date": "2026-10-05", "dateMeaning": "unverified", "count": { "text": "13万人超", "value": 130000, "unit": "人", "qualifiers": [ "超" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "verified-disclosure-partial", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "大学の臨時サイトと10月5日会見資料は確認済みです。サーバー停止と一部データ改ざんの形跡は記載されていますが、13万人超の個人情報流出や侵入原因は確認できません。障害を確定した情報漏えい事故へ変換しません。", "en": "Official outage notices and the October 5 briefing confirm server stoppages and traces of data alteration. They do not establish the supplied 130,000-person leakage or entry route. Retain this as a partial disclosure, outside the incident catalog." }, "disclosedAt": "2026-10-02", "sourceUrls": [ "https://www.omu.moe/news-files/2026-10-06-7fb5a624/press-conference-materials_20261005.pdf" ], "claims": [] }, "gaps": [ { "ja": "大学の臨時サイトと10月5日会見資料は確認済みです。サーバー停止と一部データ改ざんの形跡は記載されていますが、13万人超の個人情報流出や侵入原因は確認できません。障害を確定した情報漏えい事故へ変換しません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [ "https://e.omu.ac.jp/web-failure/", "https://www.omu.moe/", "https://www.omu.moe/news-files/2026-10-06-7fb5a624/press-conference-materials_20261005.pdf", "https://www.omu.moe/news/2026-10-02-outage-1.html", "https://www.omu.moe/news/2026-10-02-outage-2.html" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-012", "organization": "大和証券", "supplied": { "date": "2026-10-05", "dateMeaning": "unverified", "count": { "text": "約11万人", "value": 110000, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "scala-iask-2026" ], "verified": { "summary": { "ja": "11万人と22万件を区別し、スカラの同じ事案へ対応付けます。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-05", "sourceUrls": [ "https://ssl4.eir-parts.net/doc/8601/tdnet/2891437/00.pdf", "https://scala-com.jp/news/2026/10-1/", "https://www.citizen.co.jp/release/news/detail/2026/20261006.html", "https://www.sompo-japan.co.jp/-/media/SJNK/files/news/2026/20261007_1.pdf?la=ja-JP" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "i-askの管理画面に不正ログインし、不正プログラムが設置されました。", "en": "Unauthorized administrator login was followed by installation of a program." }, "locator": "1. 漏えいの経緯", "sourceUrls": [ "https://scala-com.jp/news/2026/10-1/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "同一サーバーの最大5社、最大713,126件の延べ問い合わせ情報に漏えいの可能性があります。", "en": "Potential exposure spans up to five customers and 713,126 non-deduplicated inquiries." }, "locator": "2. 漏えいした可能性のある情報", "sourceUrls": [ "https://scala-com.jp/news/2026/10-1/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "大和証券は約11万人の情報、識別できない問い合わせも含め約22万件への影響の可能性を公表しました。", "en": "Daiwa reported potential exposure affecting about 110,000 people and about 220,000 inquiries including unidentifiable records." }, "locator": "p.2 §2", "sourceUrls": [ "https://ssl4.eir-parts.net/doc/8601/tdnet/2891437/00.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "シチズン時計は約10万人、損保ジャパンは約6万件の延べ問い合わせへの影響の可能性を公表しました。", "en": "Citizen reported about 100,000 people; Sompo reported about 60,000 inquiries. Both describe possible exposure." }, "locator": "シチズン §漏えいの可能性がある情報 / 損保ジャパン §2", "sourceUrls": [ "https://www.citizen.co.jp/release/news/detail/2026/20261006.html", "https://www.sompo-japan.co.jp/-/media/SJNK/files/news/2026/20261007_1.pdf?la=ja-JP" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-013", "organization": "焼肉きんぐ", "supplied": { "date": "2026-10-05", "dateMeaning": "unverified", "count": { "text": "1,078万8,963件", "value": 10788963, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "yakiniku-king-2026" ], "verified": { "summary": { "ja": "原因は調査中であり、ライブラリや端末侵害へ分類しません。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-10-05", "sourceUrls": [ "https://www.monogatari.co.jp/news/261005_news/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "会員管理システムへの不正アクセスを10月2日に確認しました。", "en": "Unauthorized access to the member-management system was detected on October 2." }, "locator": "1. 経緯", "sourceUrls": [ "https://www.monogatari.co.jp/news/261005_news/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "10,788,963件の会員番号・氏名・メールアドレス・電話番号が漏えいしました。ログインパスワードや店舗利用履歴は対象外です。", "en": "10,788,963 records with member numbers, names, emails, and phone numbers leaked; login passwords and store histories were unaffected." }, "locator": "2. 漏えいした情報の内容", "sourceUrls": [ "https://www.monogatari.co.jp/news/261005_news/" ] }, { "topic": "cause", "status": "unknown", "text": { "ja": "不正アクセスが可能になった原因と経緯は調査中です。", "en": "The cause and circumstances enabling entry remain under investigation." }, "locator": "3. 原因", "sourceUrls": [ "https://www.monogatari.co.jp/news/261005_news/" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-014", "organization": "袋井市立袋井北小学校", "supplied": { "date": "2026-10-05", "dateMeaning": "unverified", "count": { "text": "6,631人", "value": 6631, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "袋井北小学校の6,631人について、事故本文を確認できる自治体の一次資料を見つけられませんでした。報道のみで原因や人数を確定しません。", "en": "No corresponding first-party incident notice was found for Fukuroi Kita Elementary School’s supplied 6,631-person figure. Reporting alone does not establish the count or cause." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "袋井北小学校の6,631人について、事故本文を確認できる自治体の一次資料を見つけられませんでした。報道のみで原因や人数を確定しません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-015", "organization": "日本経済新聞社", "supplied": { "date": "2026-10-04", "dateMeaning": "unverified", "count": { "text": "1,646人", "value": 1646, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "nikkei-workspace-2026" ], "verified": { "summary": { "ja": "業務用Google Workspaceのアカウントが7月下旬以降不正ログインされました。 社員・取引先等1,646人の情報が潜在的対象で、読者・取材先情報は含まれません。", "en": "A Google Workspace account was accessed without authorization from late July. Data for 1,646 employees and contacts may be affected; reader and news-source data were excluded." }, "disclosedAt": "2026-10-04", "sourceUrls": [ "https://www.nikkei.co.jp/nikkeiinfo/news/information/1547.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "業務用Google Workspaceのアカウントが7月下旬以降不正ログインされました。", "en": "A Google Workspace account was accessed without authorization from late July." }, "locator": "本文 第1-4段落", "sourceUrls": [ "https://www.nikkei.co.jp/nikkeiinfo/news/information/1547.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "社員・取引先等1,646人の情報が潜在的対象で、読者・取材先情報は含まれません。", "en": "Data for 1,646 employees and contacts may be affected; reader and news-source data were excluded." }, "locator": "本文 第1-4段落", "sourceUrls": [ "https://www.nikkei.co.jp/nikkeiinfo/news/information/1547.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [ "https://www.nikkei.co.jp/nikkeiinfo/news/information/1547.html", "https://www.nikkei.co.jp/nikkeiinfo/news/information/1554.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-016", "organization": "スタディサプリ", "supplied": { "date": "2026-10-03", "dateMeaning": "unverified", "count": { "text": "3,687件", "value": 3687, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "studysapuri-enumeration-2026" ], "verified": { "summary": { "ja": "機能の仕様不備を突き、特定メールが登録済みか照会された可能性があります。 3,687件は登録有無を特定された可能性のあるメール数です。利用者アカウントへの不正ログインは未確認です。", "en": "A feature-specification defect may have enabled identification of registered email addresses. 3,687 is the count of addresses whose membership may have been identified; user-account compromise was not confirmed." }, "disclosedAt": "2026-10-03", "sourceUrls": [ "https://studysapuri.jp/info/important/#ssntc_303" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "機能の仕様不備を突き、特定メールが登録済みか照会された可能性があります。", "en": "A feature-specification defect may have enabled identification of registered email addresses." }, "locator": "#ssntc_303 原因 / 影響範囲 / 当社の対応", "sourceUrls": [ "https://studysapuri.jp/info/important/#ssntc_303" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "3,687件は登録有無を特定された可能性のあるメール数です。利用者アカウントへの不正ログインは未確認です。", "en": "3,687 is the count of addresses whose membership may have been identified; user-account compromise was not confirmed." }, "locator": "#ssntc_303 原因 / 影響範囲 / 当社の対応", "sourceUrls": [ "https://studysapuri.jp/info/important/#ssntc_303" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://studysapuri.jp/info/important/#ssntc_303", "https://www.city.chiyoda.lg.jp/koho/kosodate/kyoikuinkai/studysapuri-roei.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-017", "organization": "第一生命", "supplied": { "date": "2026-10-02", "dateMeaning": "unverified", "count": { "text": "約12万人", "value": 120000, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "daiichi-life-hr-2026" ], "verified": { "summary": { "ja": "従業員向け人事システムへの不正アクセスを9月24日に検知しました。 従業員約5万人と退職者約7万人の計約12万人が流出の可能性の対象です。顧客情報への不正アクセスは確認されていません。", "en": "Unauthorized access to the employee HR system was detected on September 24. Potential exposure covers about 50,000 employees and 70,000 former employees; customer-data access is unconfirmed." }, "disclosedAt": "2026-10-02", "sourceUrls": [ "https://www.dai-ichi-life.co.jp/information/pdf/index_192.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "従業員向け人事システムへの不正アクセスを9月24日に検知しました。", "en": "Unauthorized access to the employee HR system was detected on September 24." }, "locator": "p.1 冒頭 / 現時点で閲覧され、外部に流出した可能性のある個人情報", "sourceUrls": [ "https://www.dai-ichi-life.co.jp/information/pdf/index_192.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "従業員約5万人と退職者約7万人の計約12万人が流出の可能性の対象です。顧客情報への不正アクセスは確認されていません。", "en": "Potential exposure covers about 50,000 employees and 70,000 former employees; customer-data access is unconfirmed." }, "locator": "p.1 冒頭 / 現時点で閲覧され、外部に流出した可能性のある個人情報", "sourceUrls": [ "https://www.dai-ichi-life.co.jp/information/pdf/index_192.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [ "https://www.dai-ichi-life.co.jp/information/pdf/index_192.pdf", "https://www.daiichilife-group.com/news/assets/pdf/portalaccess.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-018", "organization": "JOGMEC", "supplied": { "date": "2026-10-02", "dateMeaning": "unverified", "count": { "text": "約8,500件", "value": 8500, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "jogmec-directory-2026" ], "verified": { "summary": { "ja": "調査の結果、システムへの不正アクセスによる漏えいの可能性が9月9日に判明しました。 役職員アドレス約1,100件と外部アドレス約7,400件が潜在的対象です。", "en": "Investigation found possible leakage through unauthorized system access on September 9. Potential scope covers about 1,100 staff and 7,400 external email addresses." }, "disclosedAt": "2026-10-02", "sourceUrls": [ "https://www.jogmec.go.jp/news/information/information_00706.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "調査の結果、システムへの不正アクセスによる漏えいの可能性が9月9日に判明しました。", "en": "Investigation found possible leakage through unauthorized system access on September 9." }, "locator": "§§1-5", "sourceUrls": [ "https://www.jogmec.go.jp/news/information/information_00706.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "役職員アドレス約1,100件と外部アドレス約7,400件が潜在的対象です。", "en": "Potential scope covers about 1,100 staff and 7,400 external email addresses." }, "locator": "§§1-5", "sourceUrls": [ "https://www.jogmec.go.jp/news/information/information_00706.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.jogmec.go.jp/news/information/information_00706.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-019", "organization": "ニチイ学館", "supplied": { "date": "2026-10-02", "dateMeaning": "unverified", "count": { "text": "583人", "value": 583, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "nichii-backup-exposure-2026" ], "verified": { "summary": { "ja": "削除されずに残ったバックアップが、2020年5月11日〜2026年9月11日に認証なしで取得できる状態でした。 問い合わせ入力2,674件のうち583名分に個人情報があり、99名分は要配慮個人情報を含みます。構造化された顧客情報欄は暗号化され取得できないと説明しています。", "en": "A retained backup was downloadable without authentication from May 11, 2020 to September 11, 2026. Of 2,674 inquiry entries, 583 people had personal data and 99 had sensitive data. Structured customer fields were reportedly encrypted and inaccessible." }, "disclosedAt": "2026-10-02", "sourceUrls": [ "https://www.nichiigakkan.co.jp/topics/assets/2ba7ca6c5a8a249293493f6eb40ad90b9be2ce78.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "削除されずに残ったバックアップが、2020年5月11日〜2026年9月11日に認証なしで取得できる状態でした。", "en": "A retained backup was downloadable without authentication from May 11, 2020 to September 11, 2026." }, "locator": "p.1 §1 / p.2 §1(2)-(4), §2-3", "sourceUrls": [ "https://www.nichiigakkan.co.jp/topics/assets/2ba7ca6c5a8a249293493f6eb40ad90b9be2ce78.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "問い合わせ入力2,674件のうち583名分に個人情報があり、99名分は要配慮個人情報を含みます。構造化された顧客情報欄は暗号化され取得できないと説明しています。", "en": "Of 2,674 inquiry entries, 583 people had personal data and 99 had sensitive data. Structured customer fields were reportedly encrypted and inaccessible." }, "locator": "p.1 §1 / p.2 §1(2)-(4), §2-3", "sourceUrls": [ "https://www.nichiigakkan.co.jp/topics/assets/2ba7ca6c5a8a249293493f6eb40ad90b9be2ce78.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-01.shtm" ], "attemptedSourceUrls": [ "https://www.nichiigakkan.co.jp/topics/assets/2ba7ca6c5a8a249293493f6eb40ad90b9be2ce78.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-020", "organization": "e-Tax", "supplied": { "date": "2026-10-02", "dateMeaning": "unverified", "count": { "text": "203人", "value": 203, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "e-Taxの203人に対応する一次資料を特定できませんでした。見つかった国税庁資料はシステムの処理遅延に関する別の内容です。", "en": "The located tax-agency document concerns a system slowdown, not this 203-person incident. The corresponding first-party notice remains unidentified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "e-Taxの203人に対応する一次資料を特定できませんでした。見つかった国税庁資料はシステムの処理遅延に関する別の内容です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [ "https://www.nta.go.jp/files/000041014.pdf" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-021", "organization": "OZmall", "supplied": { "date": "2026-10-01", "dateMeaning": "unverified", "count": { "text": "44万2,779件", "value": 442779, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "ozmall-2026" ], "verified": { "summary": { "ja": "大量の不正アクセスを検知し、原因となった脆弱性へ対処しました。種類は未公表です。 最大442,779人が潜在的対象で、一部退会者を含みます。初報の447,610人から修正しています。", "en": "Abnormal access was detected and the responsible vulnerability addressed; its type is undisclosed. Potential scope is up to 442,779 people including former users, revised from 447,610." }, "disclosedAt": "2026-09-27", "sourceUrls": [ "https://starts-pub.jp/info20261001" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "大量の不正アクセスを検知し、原因となった脆弱性へ対処しました。種類は未公表です。", "en": "Abnormal access was detected and the responsible vulnerability addressed; its type is undisclosed." }, "locator": "第2報 §§1-4", "sourceUrls": [ "https://starts-pub.jp/info20261001" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大442,779人が潜在的対象で、一部退会者を含みます。初報の447,610人から修正しています。", "en": "Potential scope is up to 442,779 people including former users, revised from 447,610." }, "locator": "第2報 §§1-4", "sourceUrls": [ "https://starts-pub.jp/info20261001" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://starts-pub.jp/info20261001" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-022", "organization": "日本原子力研究開発機構", "supplied": { "date": "2026-10-01", "dateMeaning": "unverified", "count": { "text": "175人", "value": 175, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "jaea-jrr3-files-2026" ], "verified": { "summary": { "ja": "研究支援サイトの2,419ファイルを不正ダウンロードされました。 個人情報を含む367ファイル・175人が流出し、6人分は個人番号を含みます。", "en": "2,419 research-support files were downloaded without authorization. 367 personal-data files for 175 people leaked, including identification numbers for six people." }, "disclosedAt": "2026-10-01", "sourceUrls": [ "https://www.jaea.go.jp/02/press2026/p26100105/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "研究支援サイトの2,419ファイルを不正ダウンロードされました。", "en": "2,419 research-support files were downloaded without authorization." }, "locator": "本事象の概要 / 漏えいした個人情報 / 対応状況", "sourceUrls": [ "https://www.jaea.go.jp/02/press2026/p26100105/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "個人情報を含む367ファイル・175人が流出し、6人分は個人番号を含みます。", "en": "367 personal-data files for 175 people leaked, including identification numbers for six people." }, "locator": "本事象の概要 / 漏えいした個人情報 / 対応状況", "sourceUrls": [ "https://www.jaea.go.jp/02/press2026/p26100105/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [ "https://www.jaea.go.jp/02/press2026/p26100105/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-023", "organization": "チケットプラス", "supplied": { "date": "2026-10-01", "dateMeaning": "unverified", "count": { "text": "最大429人", "value": 429, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "tixplus-cache-exposure-2026" ], "verified": { "summary": { "ja": "負荷軽減のキャッシュ設定変更後、同時アクセスで別ユーザーの情報を表示する状態になりました。 自分の情報を表示された可能性のある最大107名と、他人の情報を表示された可能性のある最大322名を分けています。429名を流出被害者数とは扱いません。", "en": "A cache change intended to reduce load caused cross-user information display during concurrent access. Up to 107 data owners and 322 viewers are separate scopes. Their sum is not a confirmed leaked-person count." }, "disclosedAt": "2026-10-01", "sourceUrls": [ "https://tixplus.jp/information/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "負荷軽減のキャッシュ設定変更後、同時アクセスで別ユーザーの情報を表示する状態になりました。", "en": "A cache change intended to reduce load caused cross-user information display during concurrent access." }, "locator": "1. 発生経緯 / 4. 影響を受けた可能性のあるお客様", "sourceUrls": [ "https://tixplus.jp/information/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "自分の情報を表示された可能性のある最大107名と、他人の情報を表示された可能性のある最大322名を分けています。429名を流出被害者数とは扱いません。", "en": "Up to 107 data owners and 322 viewers are separate scopes. Their sum is not a confirmed leaked-person count." }, "locator": "1. 発生経緯 / 4. 影響を受けた可能性のあるお客様", "sourceUrls": [ "https://tixplus.jp/information/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [ "https://tixplus.jp/information/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-024", "organization": "VOISING", "supplied": { "date": "2026-09-30", "dateMeaning": "unverified", "count": { "text": "約17万件", "value": 170000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "voising-bi-2026" ], "verified": { "summary": { "ja": "9月30日は第四報。初報は8月18日。公表済みの既知脆弱性の修正が攻撃に間に合わなかったと説明。約17万件の漏えいを確認。既存の根拠箇所を現行資料の見出しへ補正する。", "en": "Reviewed against the cited primary notice; see linked catalog claims for confirmed scope and corrections." }, "disclosedAt": "2026-08-18", "sourceUrls": [ "https://voising-official.com/news/1015" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "不正アクセス前に修正版が提供されていましたが、適用されていませんでした。", "en": "A patch was available before unauthorized access but had not been applied." }, "locator": "1. 調査結果【原因】 / 3. 本件不正アクセスへの対応と再発防止策【今後の対策】", "sourceUrls": [ "https://voising-official.com/news/1015" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "約17万件の情報流出を確認したと公表しました。", "en": "VOISING reported about 170,000 confirmed leaked records." }, "locator": "1. 調査結果【漏えいが確認された件数および情報】", "sourceUrls": [ "https://voising-official.com/news/1015" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://voising-official.com/news/1015", "https://voising-official.com/news/931", "https://voising-official.com/news/936", "https://voising-official.com/news/937" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-025", "organization": "ベネフィット・ワン", "supplied": { "date": "2026-09-30", "dateMeaning": "unverified", "count": { "text": "1万3,460人", "value": 13460, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "benefit-one-tenant-export-2026" ], "verified": { "summary": { "ja": "ダウンロード機能の条件設定不備で他社従業員の情報を含めました。2025年10月に不具合を認知していましたが解消作業が適切に実施されていませんでした。 2,322企業・団体、13,460名が対象です。実際に取得した担当者は1社1名と公表しています。", "en": "An export-condition defect included other tenants' employee data. A problem recognized in October 2025 had not been properly remediated. Affected data covers 2,322 organizations and 13,460 people; one representative from one customer downloaded it." }, "disclosedAt": "2026-09-30", "sourceUrls": [ "https://corp.benefit-one.co.jp/company/news/news/2026/20260930/20260930.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "ダウンロード機能の条件設定不備で他社従業員の情報を含めました。2025年10月に不具合を認知していましたが解消作業が適切に実施されていませんでした。", "en": "An export-condition defect included other tenants' employee data. A problem recognized in October 2025 had not been properly remediated." }, "locator": "p.1 §1-2", "sourceUrls": [ "https://corp.benefit-one.co.jp/company/news/news/2026/20260930/20260930.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "2,322企業・団体、13,460名が対象です。実際に取得した担当者は1社1名と公表しています。", "en": "Affected data covers 2,322 organizations and 13,460 people; one representative from one customer downloaded it." }, "locator": "p.1 §1-2", "sourceUrls": [ "https://corp.benefit-one.co.jp/company/news/news/2026/20260930/20260930.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [ "https://corp.benefit-one.co.jp/company/news/news/2026/20260930/20260930.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-026", "organization": "吉野家ホールディングス", "supplied": { "date": "2026-09-30", "dateMeaning": "unverified", "count": { "text": "5,784件", "value": 5784, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "applynow-bi-2026" ], "verified": { "summary": { "ja": "委託先ApplyNowのデータ分析ツールの脆弱性を悪用されました。契約終了後も応募者情報が残っていました。 吉野家応募者4,998件、はなまる応募者368件、採用担当者418アカウントが対象です。件数と人数は一致しません。", "en": "A vulnerability in outsourced ApplyNow analytics was exploited; applicant data remained after contract termination. Scope includes 4,998 Yoshinoya applications, 368 Hanamaru applications, and 418 recruiter accounts; records are not distinct-person counts." }, "disclosedAt": "2026-09-09", "sourceUrls": [ "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf", "https://applynow.co.jp/news/20260909", "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf", "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託先ApplyNowのデータ分析ツールの脆弱性を悪用されました。契約終了後も応募者情報が残っていました。", "en": "A vulnerability in outsourced ApplyNow analytics was exploited; applicant data remained after contract termination." }, "locator": "p.1 §1-2 / p.2 §4", "sourceUrls": [ "https://applynow.co.jp/news/20260909", "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "吉野家応募者4,998件、はなまる応募者368件、採用担当者418アカウントが対象です。件数と人数は一致しません。", "en": "Scope includes 4,998 Yoshinoya applications, 368 Hanamaru applications, and 418 recruiter accounts; records are not distinct-person counts." }, "locator": "p.1 §1-2 / p.2 §4", "sourceUrls": [ "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf" ] }, { "topic": "entry", "status": "confirmed", "text": { "ja": "委託していたApplyNowのシステムに不正アクセスがありました。", "en": "The previously contracted ApplyNow platform was accessed without authorization." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "橿原市の2020年度応募者313件が対象の可能性があります。件数は調査中で未確定です。画像・動画は別領域で対象外です。", "en": "313 Kashihara application records may be affected; the count remains provisional. Separately stored images and videos were excluded." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf" ] }, { "topic": "entry", "status": "confirmed", "text": { "ja": "ApplyNowの不正アクセスにより、富士市の応募者情報が流出しました。", "en": "The ApplyNow intrusion leaked Fuji City applicants’ information." }, "locator": "10月7日続報 流出した個人情報 / 今後の対応", "sourceUrls": [ "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "続報で815件の漏洩を確認しました。初報の約800件の可能性から更新されました。動画は対象外です。", "en": "The follow-up confirmed 815 leaked records, updating the provisional estimate of about 800; videos were excluded." }, "locator": "10月7日続報 流出した個人情報 / 今後の対応", "sourceUrls": [ "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-02.shtm" ], "attemptedSourceUrls": [ "https://applynow.co.jp/news/20260909", "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-027", "organization": "Gポイント", "supplied": { "date": "2026-09-30", "dateMeaning": "unverified", "count": { "text": "最大約7万件", "value": 70000, "unit": "件", "qualifiers": [ "最大", "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "gpoint-2026" ], "verified": { "summary": { "ja": "Gポイントのシステムへの不正アクセスを確認しました。原因は調査中です。 会員識別子の最大約7万件が流出した可能性があります。氏名やパスワードの流出件数とは報告されていません。", "en": "Unauthorized access to G Point was confirmed; its cause is under investigation. Up to about 70,000 member identifiers may have leaked; this is not a reported count of leaked names or passwords." }, "disclosedAt": "2026-09-30", "sourceUrls": [ "https://www.g-plan.net/news/details/20260930.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "Gポイントのシステムへの不正アクセスを確認しました。原因は調査中です。", "en": "Unauthorized access to G Point was confirmed; its cause is under investigation." }, "locator": "§§1-3", "sourceUrls": [ "https://www.g-plan.net/news/details/20260930.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "会員識別子の最大約7万件が流出した可能性があります。氏名やパスワードの流出件数とは報告されていません。", "en": "Up to about 70,000 member identifiers may have leaked; this is not a reported count of leaked names or passwords." }, "locator": "§§1-3", "sourceUrls": [ "https://www.g-plan.net/news/details/20260930.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://img.gpoint.co.jp/20260930/", "https://info3.gpoint.co.jp/2026/09/925.html", "https://www.g-plan.net/news/details/20260930.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-028", "organization": "TOPPAN・損保ジャパン", "supplied": { "date": "2026-09-29", "dateMeaning": "unverified", "count": { "text": "17万7,426人", "value": 177426, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "手作業のZIPファイル混入による誤送付です。公表資料は不正アクセスやサイバー攻撃に起因しないと明記しています。", "en": "TOPPAN reports an accidental client-file attachment sent to another client, explicitly excluding a cyberattack. The potentially affected 177,426 records may include duplicate people." }, "disclosedAt": "2026-09-29", "sourceUrls": [ "https://www.holdings.toppan.com/ja/info/toppan_info20260929.pdf" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 177426, \"unit\": \"people\", \"qualifier\": \"possible-duplicates\"}]", "en": "Primary-source breakdown: [{\"value\": 177426, \"unit\": \"people\", \"qualifier\": \"possible-duplicates\"}]" }, "sourceUrls": [ "https://www.holdings.toppan.com/ja/info/toppan_info20260929.pdf" ], "locator": "pp.1-2 §§1-4" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.holdings.toppan.com/ja/info/toppan_info20260929.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-029", "organization": "セイコーマート", "supplied": { "date": "2026-09-29", "dateMeaning": "unverified", "count": { "text": "57万2,022件", "value": 572022, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued-partial", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "seicomart-app-2026" ], "verified": { "summary": { "ja": "セイコーマートアプリのサーバーへの不正アクセスを確認しました。手法の詳細は非公表です。 閲覧の対象は574,647人分です。第三報の572,022人分から増加しました。9月24日までの退会者は対象外です。", "en": "Unauthorized access to the app server was confirmed; the method is withheld. 574,647 people’s data was accessed, revised from 572,022 in the third notice; members withdrawn by September 24 are excluded." }, "disclosedAt": null, "sourceUrls": [ "https://www.seicomart.co.jp/images/top/pdf/202610051430.pdf", "https://www.secoma.co.jp/info/pdf/202609301908.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "セイコーマートアプリのサーバーへの不正アクセスを確認しました。手法の詳細は非公表です。", "en": "Unauthorized access to the app server was confirmed; the method is withheld." }, "locator": "10月5日第四報 / 9月30日第三報", "sourceUrls": [ "https://www.seicomart.co.jp/images/top/pdf/202610051430.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "閲覧の対象は574,647人分です。第三報の572,022人分から増加しました。9月24日までの退会者は対象外です。", "en": "574,647 people’s data was accessed, revised from 572,022 in the third notice; members withdrawn by September 24 are excluded." }, "locator": "10月5日第四報 / 9月30日第三報", "sourceUrls": [ "https://www.seicomart.co.jp/images/top/pdf/202610051430.pdf" ] } ] }, "gaps": [ { "ja": "初報日を一次資料で確認できていません。", "en": "The first disclosure date is not established by primary evidence." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [ "https://www.secoma.co.jp/info/pdf/202609301908.pdf", "https://www.seicomart.co.jp/images/top/pdf/202610051430.pdf", "https://www.seicomart.co.jp/info/", "https://www.seicomart.co.jp/info/?p=2", "https://www.seicomart.co.jp/info/pdf/202609290017.pdf", "https://www.seicomart.co.jp/info/pdf/202609291545.pdf" ], "retrievalFailures": [ { "url": "https://www.seicomart.co.jp/info/pdf/202609290017.pdf", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." }, { "url": "https://www.seicomart.co.jp/info/pdf/202609291545.pdf", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-030", "organization": "イープラス", "supplied": { "date": "2026-09-29", "dateMeaning": "unverified", "count": { "text": "1,463件", "value": 1463, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "eplus-refund-2026" ], "verified": { "summary": { "ja": "スマチケの払戻し情報を管理する独立したシステムへ不正アクセスされました。 1,463件が漏えいしました。銀行振込751件、カード返金644件、郵便振替68件で、クレジットカード情報と会員パスワードは対象外です。", "en": "Unauthorized access targeted the separate SmartTicket refund-management system. 1,463 records leaked: 751 bank transfers, 644 card refunds, and 68 postal transfers. Card details and member passwords were unaffected." }, "disclosedAt": "2026-09-29", "sourceUrls": [ "https://support-qa.eplus.jp/hc/ja/articles/62711500727961" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "スマチケの払戻し情報を管理する独立したシステムへ不正アクセスされました。", "en": "Unauthorized access targeted the separate SmartTicket refund-management system." }, "locator": "1. 経緯 / 2. 漏えいした個人情報 / 4. 現時点の対応状況", "sourceUrls": [ "https://support-qa.eplus.jp/hc/ja/articles/62711500727961" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "1,463件が漏えいしました。銀行振込751件、カード返金644件、郵便振替68件で、クレジットカード情報と会員パスワードは対象外です。", "en": "1,463 records leaked: 751 bank transfers, 644 card refunds, and 68 postal transfers. Card details and member passwords were unaffected." }, "locator": "1. 経緯 / 2. 漏えいした個人情報 / 4. 現時点の対応状況", "sourceUrls": [ "https://support-qa.eplus.jp/hc/ja/articles/62711500727961" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [ "https://support-qa.eplus.jp/hc/ja/articles/62711500727961-%E5%BC%8A%E7%A4%BE%E3%82%B7%E3%82%B9%E3%83%86%E3%83%A0%E3%81%AB%E5%AF%BE%E3%81%99%E3%82%8B%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AE%E7%99%BA-%E3%81%8A%E3%82%88%E3%81%B3%E5%80%8B-%E6%83%85%E5%A0%B1-%E6%BC%8F%E3%81%88%E3%81%84%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%8A%E7%9F%A5%E3%82%89%E3%81%9B" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-031", "organization": "福岡県", "supplied": { "date": "2026-09-29", "dateMeaning": "unverified", "count": { "text": "183人", "value": 183, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "fukuoka-editable-application-2026" ], "verified": { "summary": { "ja": "申請様式を閲覧専用にすべきところ、オンライン編集・保存できる設定で公開し、入力情報が残りました。 24法人の役員183人の情報が閲覧可能になりました。実際の閲覧件数は不明です。", "en": "An application file was published with editing and saving enabled instead of read-only access, retaining applicants’ information. Information about 183 officers from 24 organizations was accessible; actual view counts are unknown." }, "disclosedAt": "2026-09-29", "sourceUrls": [ "https://www.pref.fukuoka.lg.jp/press-release/nkojinjyouhou.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "申請様式を閲覧専用にすべきところ、オンライン編集・保存できる設定で公開し、入力情報が残りました。", "en": "An application file was published with editing and saving enabled instead of read-only access, retaining applicants’ information." }, "locator": "§§1-5", "sourceUrls": [ "https://www.pref.fukuoka.lg.jp/press-release/nkojinjyouhou.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "24法人の役員183人の情報が閲覧可能になりました。実際の閲覧件数は不明です。", "en": "Information about 183 officers from 24 organizations was accessible; actual view counts are unknown." }, "locator": "§§1-5", "sourceUrls": [ "https://www.pref.fukuoka.lg.jp/press-release/nkojinjyouhou.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [ "https://www.pref.fukuoka.lg.jp/press-release/nkojinjyouhou.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-032", "organization": "静岡県教育委員会", "supplied": { "date": "2026-09-29", "dateMeaning": "unverified", "count": { "text": "621人", "value": 621, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "県教育委員会の621人について、事故本文の一次資料を確認できませんでした。学校書類の紛失という二次情報だけで確定分類しません。", "en": "A first-party notice for the supplied 621-person education-board event was not found. Reported paper loss is not treated as confirmed technical intrusion." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "県教育委員会の621人について、事故本文の一次資料を確認できませんでした。学校書類の紛失という二次情報だけで確定分類しません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-033", "organization": "タイムズカー", "supplied": { "date": "2026-09-28", "dateMeaning": "unverified", "count": { "text": "660万件", "value": 6600000, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "times-car-2026" ], "verified": { "summary": { "ja": "160万件の本人確認書類は660万件の会員情報の内数です。", "en": "Reviewed against the cited primary notice; see linked catalog claims for confirmed scope and corrections." }, "disclosedAt": "2026-09-25", "sourceUrls": [ "https://share.timescar.jp/news/2026/0929/1816.html", "https://share.timescar.jp/news/2026/0928/1815.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "660万件の会員情報と、うち160万件の本人確認書類画像の流出を確認しました。両者を合算しません。", "en": "Leakage covered 6.6 million member records, including 1.6 million identity documents; these counts must not be added." }, "locator": "第2報 §1 / 第3報 §1", "sourceUrls": [ "https://share.timescar.jp/news/2026/0928/1815.html", "https://share.timescar.jp/news/2026/0929/1816.html" ] }, { "topic": "entry", "status": "confirmed", "text": { "ja": "不正アクセスの侵入経路と原因は調査中です。", "en": "The intrusion route and cause remain under investigation." }, "locator": "今後の調査", "sourceUrls": [ "https://share.timescar.jp/news/2026/0928/1815.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://share.timescar.jp/news/2026/0928/1815.html", "https://share.timescar.jp/news/2026/0929/1816.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-034", "organization": "琴浦町", "supplied": { "date": "2026-09-28", "dateMeaning": "unverified", "count": { "text": "828人", "value": 828, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "委託先が別自治体の専用領域へファイルを取り違えて格納した事案です。システムの分離は保たれ、外部侵入は公表されていません。", "en": "A mistaken municipal-file upload exposed 828 people’s information to one authorized employee of another municipality; copying was ruled out. This manual error is excluded from intrusion counts." }, "disclosedAt": "2026-09-25", "sourceUrls": [ "https://www.town.kotoura.tottori.jp/docs/2026092800036/files/juuminnjouhoude-tarouei.pdf" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 828, \"unit\": \"people\", \"qualifier\": \"reported-total\"}]", "en": "Primary-source breakdown: [{\"value\": 828, \"unit\": \"people\", \"qualifier\": \"reported-total\"}]" }, "sourceUrls": [ "https://www.town.kotoura.tottori.jp/docs/2026092800036/files/juuminnjouhoude-tarouei.pdf" ], "locator": "pp.1-2 §§1-4" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.town.kotoura.tottori.jp/docs/2026092800036/", "https://www.town.kotoura.tottori.jp/docs/2026092800036/files/juuminnjouhoude-tarouei.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-035", "organization": "名古屋市", "supplied": { "date": "2026-09-28", "dateMeaning": "unverified", "count": { "text": "572事業者", "value": 572, "unit": "事業者", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "名古屋市の572事業者に対応する事故本文を一次資料で確認できませんでした。事業者数を人数へ変換しません。", "en": "A corresponding first-party incident notice for Nagoya’s 572 businesses was not located. Business counts are not people counts." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "名古屋市の572事業者に対応する事故本文を一次資料で確認できませんでした。事業者数を人数へ変換しません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-036", "organization": "集英社", "supplied": { "date": "2026-09-28", "dateMeaning": "unverified", "count": { "text": "2,835人", "value": 2835, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "shueisha-hapicomi-2026" ], "verified": { "summary": { "ja": "同社は、CMSの設定不備に起因するAPI認証情報への攻撃、特権アカウント作成、反復API取得が原因と説明しています。 ブロガー2,835名の情報のほか、案件630件、送信メール11,237件、取引先一覧10,780件も対象です。", "en": "Shueisha attributes the incident to attacks on API credentials arising from CMS misconfiguration, privileged-account creation, and repeated API requests. Affected scopes include 2,835 bloggers, 630 projects, 11,237 sent emails, and 10,780 vendor entries." }, "disclosedAt": "2026-09-28", "sourceUrls": [ "https://www.shueisha.co.jp/wp-content/uploads/2026/09/Shueisha20260928-1.pdf" ], "claims": [ { "topic": "entry", "status": "inferred", "text": { "ja": "同社は、CMSの設定不備に起因するAPI認証情報への攻撃、特権アカウント作成、反復API取得が原因と説明しています。", "en": "Shueisha attributes the incident to attacks on API credentials arising from CMS misconfiguration, privileged-account creation, and repeated API requests." }, "locator": "p.1 §1 / p.2 §2-4", "sourceUrls": [ "https://www.shueisha.co.jp/wp-content/uploads/2026/09/Shueisha20260928-1.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "ブロガー2,835名の情報のほか、案件630件、送信メール11,237件、取引先一覧10,780件も対象です。", "en": "Affected scopes include 2,835 bloggers, 630 projects, 11,237 sent emails, and 10,780 vendor entries." }, "locator": "p.1 §1 / p.2 §2-4", "sourceUrls": [ "https://www.shueisha.co.jp/wp-content/uploads/2026/09/Shueisha20260928-1.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [ "https://www.shueisha.co.jp/wp-content/uploads/2026/09/Shueisha20260928-1.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-037", "organization": "大東ガス", "supplied": { "date": "2026-09-28", "dateMeaning": "unverified", "count": { "text": "約12万4,000件", "value": 124000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "ryomo-systems-2026" ], "verified": { "summary": { "ja": "委託先の両毛システムズの社内ネットワークに侵入されました。大東ガスの顧客システムは分離されており、過去の業務ファイルが残っていました。 大東ガスの約124,000件の情報が流出した可能性があります。", "en": "Ryomo Systems’ internal network was compromised; Daito Gas’s customer system was separated, but old working files remained in the vendor network. About 124,000 Daito Gas records may have been extracted." }, "disclosedAt": "2026-09-28", "sourceUrls": [ "https://www.daitogas.co.jp/info/170", "https://www.city.isesaki.lg.jp/soshiki/kyoikubu/shisetsu/23971.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託先の両毛システムズの社内ネットワークに侵入されました。大東ガスの顧客システムは分離されており、過去の業務ファイルが残っていました。", "en": "Ryomo Systems’ internal network was compromised; Daito Gas’s customer system was separated, but old working files remained in the vendor network." }, "locator": "§§1-4", "sourceUrls": [ "https://www.daitogas.co.jp/info/170" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "大東ガスの約124,000件の情報が流出した可能性があります。", "en": "About 124,000 Daito Gas records may have been extracted." }, "locator": "§§1-4", "sourceUrls": [ "https://www.daitogas.co.jp/info/170" ] }, { "topic": "entry", "status": "confirmed", "text": { "ja": "VPNから両毛システムズの社内ファイルサーバーへ侵入され、ランサムウェアによる攻撃を確認しました。VPNの侵害手段は未公表です。", "en": "Attackers reached Ryomo Systems’ file server through a VPN and ransomware was confirmed; the VPN compromise method is undisclosed." }, "locator": "§§1,3,5,6", "sourceUrls": [ "https://www.city.isesaki.lg.jp/soshiki/kyoikubu/shisetsu/23971.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "伊勢崎市の児童生徒アカウント情報3,789件に漏洩の可能性があります。パスワードを含みます。", "en": "3,789 Isesaki student-account records, including passwords, may have been exposed." }, "locator": "§§1,3,5,6", "sourceUrls": [ "https://www.city.isesaki.lg.jp/soshiki/kyoikubu/shisetsu/23971.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.daitogas.co.jp/info/170", "https://www.ryomo.co.jp/news/202609_02.html" ], "retrievalFailures": [ { "url": "https://www.ryomo.co.jp/news/202609_02.html", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": false }, { "id": "U2026-038", "organization": "伊勢崎市", "supplied": { "date": "2026-09-28", "dateMeaning": "unverified", "count": { "text": "3,789件", "value": 3789, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "ryomo-systems-2026" ], "verified": { "summary": { "ja": "VPNから両毛システムズの社内ファイルサーバーへ侵入され、ランサムウェアによる攻撃を確認しました。VPNの侵害手段は未公表です。 伊勢崎市の児童生徒アカウント情報3,789件に漏洩の可能性があります。パスワードを含みます。", "en": "Attackers reached Ryomo Systems’ file server through a VPN and ransomware was confirmed; the VPN compromise method is undisclosed. 3,789 Isesaki student-account records, including passwords, may have been exposed." }, "disclosedAt": "2026-09-28", "sourceUrls": [ "https://www.city.isesaki.lg.jp/soshiki/kyoikubu/shisetsu/23971.html", "https://www.daitogas.co.jp/info/170" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託先の両毛システムズの社内ネットワークに侵入されました。大東ガスの顧客システムは分離されており、過去の業務ファイルが残っていました。", "en": "Ryomo Systems’ internal network was compromised; Daito Gas’s customer system was separated, but old working files remained in the vendor network." }, "locator": "§§1-4", "sourceUrls": [ "https://www.daitogas.co.jp/info/170" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "大東ガスの約124,000件の情報が流出した可能性があります。", "en": "About 124,000 Daito Gas records may have been extracted." }, "locator": "§§1-4", "sourceUrls": [ "https://www.daitogas.co.jp/info/170" ] }, { "topic": "entry", "status": "confirmed", "text": { "ja": "VPNから両毛システムズの社内ファイルサーバーへ侵入され、ランサムウェアによる攻撃を確認しました。VPNの侵害手段は未公表です。", "en": "Attackers reached Ryomo Systems’ file server through a VPN and ransomware was confirmed; the VPN compromise method is undisclosed." }, "locator": "§§1,3,5,6", "sourceUrls": [ "https://www.city.isesaki.lg.jp/soshiki/kyoikubu/shisetsu/23971.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "伊勢崎市の児童生徒アカウント情報3,789件に漏洩の可能性があります。パスワードを含みます。", "en": "3,789 Isesaki student-account records, including passwords, may have been exposed." }, "locator": "§§1,3,5,6", "sourceUrls": [ "https://www.city.isesaki.lg.jp/soshiki/kyoikubu/shisetsu/23971.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.city.isesaki.lg.jp/soshiki/kyoikubu/shisetsu/23971.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-039", "organization": "名張近鉄ガス", "supplied": { "date": "2026-09-28", "dateMeaning": "unverified", "count": { "text": "約6,800件", "value": 6800, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "名張近鉄ガスの約6,800件について事故の一次資料を確認できませんでした。両毛システムズの共通事案との関係は、この候補について未確認です。", "en": "The Nabari Kintetsu Gas notice covering about 6,800 records was not verified. Other Ryomo disclosures do not establish this candidate’s scope." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "名張近鉄ガスの約6,800件について事故の一次資料を確認できませんでした。両毛システムズの共通事案との関係は、この候補について未確認です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-040", "organization": "東京メトロ", "supplied": { "date": "2026-09-27", "dateMeaning": "unverified", "count": { "text": "5万9,000件", "value": 59000, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "tokyometro-metpo-mail-2026" ], "verified": { "summary": { "ja": "メール配信サービスのサーバーに不正アクセスを確認しました。原因の詳細は調査中です。 配信停止中のメールアドレス約59,000件が閲覧・取得された可能性があります。該当サーバーには他の会員情報はありません。", "en": "Unauthorized access to a mail-delivery server was confirmed; the cause remains under investigation. About 59,000 suppressed email addresses may have been viewed or retrieved; that server contained no other member information." }, "disclosedAt": "2026-09-27", "sourceUrls": [ "https://www.metpo.jp/news/Gn52e-Vm" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "メール配信サービスのサーバーに不正アクセスを確認しました。原因の詳細は調査中です。", "en": "Unauthorized access to a mail-delivery server was confirmed; the cause remains under investigation." }, "locator": "§§1-3", "sourceUrls": [ "https://www.metpo.jp/news/Gn52e-Vm" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "配信停止中のメールアドレス約59,000件が閲覧・取得された可能性があります。該当サーバーには他の会員情報はありません。", "en": "About 59,000 suppressed email addresses may have been viewed or retrieved; that server contained no other member information." }, "locator": "§§1-3", "sourceUrls": [ "https://www.metpo.jp/news/Gn52e-Vm" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [ "https://www.metpo.jp/news/Gn52e-Vm", "https://www.tokyometro.jp/info/files/9172e2efa7222d15f8d4f601b6385457.pdf" ], "retrievalFailures": [ { "url": "https://www.tokyometro.jp/info/files/9172e2efa7222d15f8d4f601b6385457.pdf", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": false }, { "id": "U2026-041", "organization": "ファインズ", "supplied": { "date": "2026-09-25", "dateMeaning": "unverified", "count": { "text": "153万6,322件", "value": 1536322, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued-partial", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "fines-reservations-2026" ], "verified": { "summary": { "ja": "予約システムで第三者による不正アクセスを確認しました。具体的な原因は未公表です。 対象は予約者情報1,536,322件です。異なる予約や同一人物の重複を含むかは未公表です。", "en": "Unauthorized access to the reservation system was confirmed; the specific cause is undisclosed. 1,536,322 reservation records are affected; repeat bookings or duplicate people are not quantified." }, "disclosedAt": null, "sourceUrls": [ "https://e-tenki.co.jp/news/%E5%BC%8A%E7%A4%BE%E3%82%B7%E3%82%B9%E3%83%86%E3%83%A0%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "予約システムで第三者による不正アクセスを確認しました。具体的な原因は未公表です。", "en": "Unauthorized access to the reservation system was confirmed; the specific cause is undisclosed." }, "locator": "速報 §§1-3", "sourceUrls": [ "https://e-tenki.co.jp/news/%E5%BC%8A%E7%A4%BE%E3%82%B7%E3%82%B9%E3%83%86%E3%83%A0%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "対象は予約者情報1,536,322件です。異なる予約や同一人物の重複を含むかは未公表です。", "en": "1,536,322 reservation records are affected; repeat bookings or duplicate people are not quantified." }, "locator": "速報 §§1-3", "sourceUrls": [ "https://e-tenki.co.jp/news/%E5%BC%8A%E7%A4%BE%E3%82%B7%E3%82%B9%E3%83%86%E3%83%A0%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84/" ] } ] }, "gaps": [ { "ja": "初報日を一次資料で確認できていません。", "en": "The first disclosure date is not established by primary evidence." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [ "https://e-tenki.co.jp/news/%E5%BC%8A%E7%A4%BE%E3%82%B7%E3%82%B9%E3%83%86%E3%83%A0%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84/", "https://www.fine-revolution.co.jp/info/3879/" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-042", "organization": "レゴランド・ジャパン", "supplied": { "date": "2026-09-25", "dateMeaning": "unverified", "count": { "text": "1,557件", "value": 1557, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "legoland-amadeus-2026" ], "verified": { "summary": { "ja": "委託するAmadeusのホテル予約プラットフォームで不正アクセスが発生しました。侵入原因は未公表です。 予約1,557件の連絡先情報が影響を受けた可能性があります。決済、パスワード、金融、パスポート情報へのアクセスは確認されていません。", "en": "The outsourced Amadeus hotel-booking platform was accessed without authorization; its entry cause is undisclosed. Contact data from 1,557 bookings may be affected; payment, password, financial and passport access was not confirmed." }, "disclosedAt": "2026-09-25", "sourceUrls": [ "https://www.legoland.jp/operation/news/news-release/news20260925/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託するAmadeusのホテル予約プラットフォームで不正アクセスが発生しました。侵入原因は未公表です。", "en": "The outsourced Amadeus hotel-booking platform was accessed without authorization; its entry cause is undisclosed." }, "locator": "本文", "sourceUrls": [ "https://www.legoland.jp/operation/news/news-release/news20260925/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "予約1,557件の連絡先情報が影響を受けた可能性があります。決済、パスワード、金融、パスポート情報へのアクセスは確認されていません。", "en": "Contact data from 1,557 bookings may be affected; payment, password, financial and passport access was not confirmed." }, "locator": "本文", "sourceUrls": [ "https://www.legoland.jp/operation/news/news-release/news20260925/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [ "https://www.legoland.jp/operation/news/news-release/news20260925/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-043", "organization": "愛知県 あいこんナビ", "supplied": { "date": "2026-09-21", "dateMeaning": "unverified", "count": { "text": "599人", "value": 599, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "2018年のイベント掲載申請に個人情報ファイルを誤添付し、県の承認時にも見落とした事案です。不正アクセスとして扱いません。599人を一次資料で確認しました。9月22日の更新を確認できましたが、一覧の9月21日が初報日かは未確認です。", "en": "An event applicant mistakenly attached personal data in 2018 and the prefecture approved it without noticing. The primary notice confirms 599 people; this publication error is not an intrusion. September 22 is the verified page-update date." }, "disclosedAt": "2026-09-22", "sourceUrls": [ "https://www.pref.aichi.jp/press-release/aiconnavikisya202609.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 599, \"unit\": \"人\", \"scope\": \"イベント参加者等\"}]", "en": "Primary-source breakdown: [{\"value\": 599, \"unit\": \"人\", \"scope\": \"イベント参加者等\"}]" }, "sourceUrls": [ "https://www.pref.aichi.jp/press-release/aiconnavikisya202609.html" ], "locator": "1〜3 / 5 原因" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.pref.aichi.jp/press-release/aiconnavikisya202609.html" ], "retrievalFailures": [ { "url": "https://www.pref.aichi.jp/press-release/aiconnavikisya202609.html", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": false }, { "id": "U2026-044", "organization": "ConoHa WING", "supplied": { "date": "2026-09-20", "dateMeaning": "unverified", "count": { "text": "426アカウント", "value": 426, "unit": "アカウント", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "conoha-wing-2026" ], "verified": { "summary": { "ja": "一部Webサーバー領域に不正アクセスされ、不正プログラムを設置されました。原因の技術詳細は未公表です。 426アカウントのサーバー領域が対象です。会員・契約・支払い情報は別環境にあり、漏洩していないと説明しています。", "en": "Some hosted web-server areas were accessed and malicious programs installed; technical entry details are undisclosed. 426 hosting accounts are affected; separately stored membership, contract and payment information is reported unaffected." }, "disclosedAt": "2026-09-20", "sourceUrls": [ "https://www.conoha.jp/wing/news/?ap=2015054834&btn_id=www_rspnet_jp--p5050_post20260920a170000g" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "一部Webサーバー領域に不正アクセスされ、不正プログラムを設置されました。原因の技術詳細は未公表です。", "en": "Some hosted web-server areas were accessed and malicious programs installed; technical entry details are undisclosed." }, "locator": "§§1-3", "sourceUrls": [ "https://www.conoha.jp/wing/news/?ap=2015054834&btn_id=www_rspnet_jp--p5050_post20260920a170000g" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "426アカウントのサーバー領域が対象です。会員・契約・支払い情報は別環境にあり、漏洩していないと説明しています。", "en": "426 hosting accounts are affected; separately stored membership, contract and payment information is reported unaffected." }, "locator": "§§1-3", "sourceUrls": [ "https://www.conoha.jp/wing/news/?ap=2015054834&btn_id=www_rspnet_jp--p5050_post20260920a170000g" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.conoha.jp/wing/news/?ap=2015054834&btn_id=www_rspnet_jp--p5050_post20260920a170000g" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-045", "organization": "ニチレイ", "supplied": { "date": "2026-09-18", "dateMeaning": "unverified", "count": { "text": "5万3,866件", "value": 53866, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "nichirei-2026" ], "verified": { "summary": { "ja": "サーバーへのサイバー攻撃を確認しました。侵入経路は未公表です。 配送先3,308件、取引先6,849件、従業員・家族等43,709件の流出を確認しました。計53,866件は人数ではありません。", "en": "A server cyberattack was confirmed; its entry route is undisclosed. 3,308 delivery, 6,849 contact and 43,709 employee/family records leaked; the 53,866-record total is not a person count." }, "disclosedAt": "2026-07-13", "sourceUrls": [ "https://www.nichirei.co.jp/news/2026/524.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "サーバーへのサイバー攻撃を確認しました。侵入経路は未公表です。", "en": "A server cyberattack was confirmed; its entry route is undisclosed." }, "locator": "第7報 §§1-3", "sourceUrls": [ "https://www.nichirei.co.jp/news/2026/524.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "配送先3,308件、取引先6,849件、従業員・家族等43,709件の流出を確認しました。計53,866件は人数ではありません。", "en": "3,308 delivery, 6,849 contact and 43,709 employee/family records leaked; the 53,866-record total is not a person count." }, "locator": "第7報 §§1-3", "sourceUrls": [ "https://www.nichirei.co.jp/news/2026/524.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.nichirei.co.jp/news/2026/512.html", "https://www.nichirei.co.jp/news/2026/513.html", "https://www.nichirei.co.jp/news/2026/514.html", "https://www.nichirei.co.jp/news/2026/515.html", "https://www.nichirei.co.jp/news/2026/517.html", "https://www.nichirei.co.jp/news/2026/524.html", "https://www.nichirei.co.jp/news/2026/530.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-046", "organization": "橿原市", "supplied": { "date": "2026-09-18", "dateMeaning": "unverified", "count": { "text": "313人", "value": 313, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "applynow-bi-2026" ], "verified": { "summary": { "ja": "委託していたApplyNowのシステムに不正アクセスがありました。 橿原市の2020年度応募者313件が対象の可能性があります。件数は調査中で未確定です。画像・動画は別領域で対象外です。", "en": "The previously contracted ApplyNow platform was accessed without authorization. 313 Kashihara application records may be affected; the count remains provisional. Separately stored images and videos were excluded." }, "disclosedAt": "2026-09-09", "sourceUrls": [ "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf", "https://applynow.co.jp/news/20260909", "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf", "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託先ApplyNowのデータ分析ツールの脆弱性を悪用されました。契約終了後も応募者情報が残っていました。", "en": "A vulnerability in outsourced ApplyNow analytics was exploited; applicant data remained after contract termination." }, "locator": "p.1 §1-2 / p.2 §4", "sourceUrls": [ "https://applynow.co.jp/news/20260909", "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "吉野家応募者4,998件、はなまる応募者368件、採用担当者418アカウントが対象です。件数と人数は一致しません。", "en": "Scope includes 4,998 Yoshinoya applications, 368 Hanamaru applications, and 418 recruiter accounts; records are not distinct-person counts." }, "locator": "p.1 §1-2 / p.2 §4", "sourceUrls": [ "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf" ] }, { "topic": "entry", "status": "confirmed", "text": { "ja": "委託していたApplyNowのシステムに不正アクセスがありました。", "en": "The previously contracted ApplyNow platform was accessed without authorization." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "橿原市の2020年度応募者313件が対象の可能性があります。件数は調査中で未確定です。画像・動画は別領域で対象外です。", "en": "313 Kashihara application records may be affected; the count remains provisional. Separately stored images and videos were excluded." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf" ] }, { "topic": "entry", "status": "confirmed", "text": { "ja": "ApplyNowの不正アクセスにより、富士市の応募者情報が流出しました。", "en": "The ApplyNow intrusion leaked Fuji City applicants’ information." }, "locator": "10月7日続報 流出した個人情報 / 今後の対応", "sourceUrls": [ "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "続報で815件の漏洩を確認しました。初報の約800件の可能性から更新されました。動画は対象外です。", "en": "The follow-up confirmed 815 leaked records, updating the provisional estimate of about 800; videos were excluded." }, "locator": "10月7日続報 流出した個人情報 / 今後の対応", "sourceUrls": [ "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-03.shtm" ], "attemptedSourceUrls": [ "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf", "https://www.city.kashihara.nara.jp/soshiki/1003/gyomu/7/5/21209.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-047", "organization": "兵庫県", "supplied": { "date": "2026-09-18", "dateMeaning": "unverified", "count": { "text": "延べ972人", "value": 972, "unit": "人", "qualifiers": [ "延べ" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "兵庫県の事案は二次情報で対象数と送信数に差異があり、原資料を取得できませんでした。972人という入力値は未検証です。", "en": "Secondary accounts disagree on recipient and transmission counts; the original notice was unavailable. The supplied 972-person figure remains unverified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "兵庫県の事案は二次情報で対象数と送信数に差異があり、原資料を取得できませんでした。972人という入力値は未検証です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-048", "organization": "ちばぎん商店", "supplied": { "date": "2026-09-17", "dateMeaning": "unverified", "count": { "text": "約2,338件", "value": 2338, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "chibagin-shoten-2026" ], "verified": { "summary": { "ja": "委託先の企業サイトが改ざんされました。侵入経路は調査中です。 ギフト送付先は個人約722先、法人約1,616先です。外部送信の証跡は未確認です。", "en": "A subsidiary website was altered; the entry route is under investigation. Potential exposure concerns approximately 722 individual and 1,616 corporate gift recipients; exfiltration evidence was not found." }, "disclosedAt": "2026-09-17", "sourceUrls": [ "https://www.chibabank.co.jp/news/news20260917_01" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託先の企業サイトが改ざんされました。侵入経路は調査中です。", "en": "A subsidiary website was altered; the entry route is under investigation." }, "locator": "p.1-2 §§1-3", "sourceUrls": [ "https://www.chibabank.co.jp/news/news20260917_01" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "ギフト送付先は個人約722先、法人約1,616先です。外部送信の証跡は未確認です。", "en": "Potential exposure concerns approximately 722 individual and 1,616 corporate gift recipients; exfiltration evidence was not found." }, "locator": "p.1-2 §§1-3", "sourceUrls": [ "https://www.chibabank.co.jp/news/news20260917_01" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://www.chibabank.co.jp/news/news20260917_01" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-049", "organization": "愛知県精神保健福祉センター", "supplied": { "date": "2026-09-17", "dateMeaning": "unverified", "count": { "text": "172人", "value": 172, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "申請書類233件の紛失（重複を除く申請者172人）です。紙の文書管理の問題であり、外部侵入は公表されていません。", "en": "The prefecture reports lost paper records: 233 forms relating to 172 distinct people. This is excluded from remote-intrusion counts." }, "disclosedAt": "2026-09-17", "sourceUrls": [ "https://www.pref.aichi.jp/press-release/20260917.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 172, \"unit\": \"people\", \"qualifier\": \"deduplicated\"}]", "en": "Primary-source breakdown: [{\"value\": 172, \"unit\": \"people\", \"qualifier\": \"deduplicated\"}]" }, "sourceUrls": [ "https://www.pref.aichi.jp/press-release/20260917.html" ], "locator": "§1(1),(3),(4)" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://www.pref.aichi.jp/press-release/20260917.html" ], "retrievalFailures": [ { "url": "https://www.pref.aichi.jp/press-release/20260917.html", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": false }, { "id": "U2026-050", "organization": "一宮市", "supplied": { "date": "2026-09-17", "dateMeaning": "unverified", "count": { "text": "約600件", "value": 600, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "一宮市の発表URLは現在、一覧ページへ遷移します。別の配信先は証明書不一致または取得失敗でした。約600件や委託先を本文確認済みにはしません。", "en": "The official notice URL now redirects to a press index. Another delivery URL failed certificate validation or retrieval; its alleged count and vendor remain unverified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "一宮市の発表URLは現在、一覧ページへ遷移します。別の配信先は証明書不一致または取得失敗でした。約600件や委託先を本文確認済みにはしません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://0f23b6763487cca1605a77614f539eaf.cdnext.stream.ne.jp/shisei/houdouhappyo/1068631/1075827/1077006.html" ], "retrievalFailures": [ { "url": "https://0f23b6763487cca1605a77614f539eaf.cdnext.stream.ne.jp/shisei/houdouhappyo/1068631/1075827/1077006.html", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-051", "organization": "Gyazo", "supplied": { "date": "2026-09-16", "dateMeaning": "unverified", "count": { "text": "2,362万件", "value": 23620000, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "gyazo-2026" ], "verified": { "summary": { "ja": "2,362万件には匿名ユーザー約1,801万件を含み、画像メタデータと画像ファイルは別です。", "en": "Reviewed against the cited primary notice; see linked catalog claims for confirmed scope and corrections." }, "disclosedAt": "2026-09-16", "sourceUrls": [ "https://corp.helpfeel.com/news/news-20260925-01", "https://corp.helpfeel.com/news/news-20260916-1" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "9月11日に画像アップロード用サーバーへのコード実行があり、同日夜に検知しました。", "en": "Remote code execution affected the image-upload server on September 11 and was detected that evening." }, "locator": "初報：1. 発生した事象", "sourceUrls": [ "https://corp.helpfeel.com/news/news-20260916-1" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "ユーザー情報2,362万件と画像メタデータの取得を確認しました。メタデータ件数は画像ファイルの流出件数ではありません。", "en": "The company confirmed access to 23.62 million user records and image metadata; metadata counts are not image-file exfiltration counts." }, "locator": "影響範囲", "sourceUrls": [ "https://corp.helpfeel.com/news/news-20260925-01" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://corp.helpfeel.com/news/news-20260916-1", "https://corp.helpfeel.com/news/news-20260925-01" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-052", "organization": "アイスタイル", "supplied": { "date": "2026-09-16", "dateMeaning": "unverified", "count": { "text": "1万997人", "value": 10997, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "istyle-transfer-exposure-2026" ], "verified": { "summary": { "ja": "社内受け渡し用ファイルを外部転送サービスで公開設定にしてしまい、URLを知る人が閲覧可能でした。 10,997人のメールアドレス等が20分間閲覧可能でした。氏名やパスワードは対象外です。", "en": "A sharing-setting error made an internal-transfer file accessible to anyone knowing its URL. Email addresses and associated data for 10,997 users were exposed for 20 minutes; names and passwords were excluded." }, "disclosedAt": "2026-09-16", "sourceUrls": [ "https://www.istyle.co.jp/news/info/2026/09/20260916-3.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "社内受け渡し用ファイルを外部転送サービスで公開設定にしてしまい、URLを知る人が閲覧可能でした。", "en": "A sharing-setting error made an internal-transfer file accessible to anyone knowing its URL." }, "locator": "§§1-4", "sourceUrls": [ "https://www.istyle.co.jp/news/info/2026/09/20260916-3.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "10,997人のメールアドレス等が20分間閲覧可能でした。氏名やパスワードは対象外です。", "en": "Email addresses and associated data for 10,997 users were exposed for 20 minutes; names and passwords were excluded." }, "locator": "§§1-4", "sourceUrls": [ "https://www.istyle.co.jp/news/info/2026/09/20260916-3.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://www.istyle.co.jp/news/info/2026/09/20260916-3.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-053", "organization": "LEAN BODY", "supplied": { "date": "2026-09-15", "dateMeaning": "unverified", "count": { "text": "44万件", "value": 440000, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "leanbody-metabase-2026" ], "verified": { "summary": { "ja": "Metabaseの脆弱性を悪用されました。必要な更新ができていなかったことも原因の可能性が高いと認識しています。 退会者を含む約44万アカウントのデータ取得を確認しました。重複があり人数とは異なります。", "en": "A Metabase vulnerability was exploited; the operator considers missed necessary updates a likely contributing factor. Theft affected about 440,000 accounts, including former users; this is not a unique-person count." }, "disclosedAt": "2026-09-15", "sourceUrls": [ "https://lean-body.co.jp/news/JlBWMCs7" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "Metabaseの脆弱性を悪用されました。", "en": "A Metabase vulnerability was exploited." }, "locator": "§§1-4,8（ブラウザで本文確認）", "sourceUrls": [ "https://lean-body.co.jp/news/JlBWMCs7" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "退会者を含む約44万アカウントのデータ取得を確認しました。重複があり人数とは異なります。", "en": "Theft affected about 440,000 accounts, including former users; this is not a unique-person count." }, "locator": "§§1-4,8（ブラウザで本文確認）", "sourceUrls": [ "https://lean-body.co.jp/news/JlBWMCs7" ] }, { "topic": "patching", "status": "inferred", "text": { "ja": "必要な更新ができていなかったことも原因の可能性が高い、という会社の認識です。", "en": "The company assesses omitted necessary updates as a likely contributing factor." }, "locator": "§§1-4,8（ブラウザで本文確認）", "sourceUrls": [ "https://lean-body.co.jp/news/JlBWMCs7" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://lean-body.co.jp/news/JlBWMCs7" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-054", "organization": "ムラウチドットコム", "supplied": { "date": "2026-09-15", "dateMeaning": "unverified", "count": { "text": "771万6,811件", "value": 7716811, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued-partial", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "murauchi-2026" ], "verified": { "summary": { "ja": "社内システムへの第三者の不正アクセスと、個人情報の外部持ち出しを確認しました。原因の技術詳細は未確認です。 顧客の氏名、住所、電話番号などが流出しました。ログインID・パスワード、決済情報、お届け先登録情報は対象外です。件数はPDF本文を確認できていません。", "en": "The company confirmed unauthorized system access and extraction of personal information; technical entry details remain unverified. Customer names, addresses and telephone numbers were leaked; login credentials, payment data and delivery-address records were excluded. The PDF count remains unverified." }, "disclosedAt": "2026-07-24", "sourceUrls": [ "https://murauchi.com/static-pages/privacy/pressrelease.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "社内システムへの第三者の不正アクセスと、個人情報の外部持ち出しを確認しました。原因の技術詳細は未確認です。", "en": "The company confirmed unauthorized system access and extraction of personal information; technical entry details remain unverified." }, "locator": "冒頭 / FAQ Q1-Q3,Q7,Q9", "sourceUrls": [ "https://murauchi.com/static-pages/privacy/pressrelease.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "顧客の氏名、住所、電話番号などが流出しました。ログインID・パスワード、決済情報、お届け先登録情報は対象外です。件数はPDF本文を確認できていません。", "en": "Customer names, addresses and telephone numbers were leaked; login credentials, payment data and delivery-address records were excluded. The PDF count remains unverified." }, "locator": "冒頭 / FAQ Q1-Q3,Q7,Q9", "sourceUrls": [ "https://murauchi.com/static-pages/privacy/pressrelease.html" ] } ] }, "gaps": [ { "ja": "提供一覧の件数は、確認した一次資料では検証できていません。", "en": "The supplied count was not verified by the reviewed primary notice." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://murauchi.com/static-pages/privacy/%E5%BC%8A%E7%A4%BE%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E3%81%8A%E5%AE%A2%E6%A7%98%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A%EF%BC%88%E7%AC%AC%E4%B8%80%E5%A0%B1%EF%BC%89.pdf?srsltid=AfmBOoqtjvgyG-xw2ipdchXhzFAGVtcwJa_Focd-OmF-2qEMq-cIpzip", "https://murauchi.com/static-pages/privacy/%E5%BC%8A%E7%A4%BE%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E3%81%8A%E5%AE%A2%E6%A7%98%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A%EF%BC%88%E7%AC%AC%E4%BA%8C%E5%A0%B1%EF%BC%89.pdf", "https://murauchi.com/static-pages/privacy/pressrelease.html" ], "retrievalFailures": [ { "url": "https://murauchi.com/static-pages/privacy/%E5%BC%8A%E7%A4%BE%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E3%81%8A%E5%AE%A2%E6%A7%98%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A%EF%BC%88%E7%AC%AC%E4%B8%80%E5%A0%B1%EF%BC%89.pdf?srsltid=AfmBOoqtjvgyG-xw2ipdchXhzFAGVtcwJa_Focd-OmF-2qEMq-cIpzip", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." }, { "url": "https://murauchi.com/static-pages/privacy/%E5%BC%8A%E7%A4%BE%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E3%81%8A%E5%AE%A2%E6%A7%98%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A%EF%BC%88%E7%AC%AC%E4%BA%8C%E5%A0%B1%EF%BC%89.pdf", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." }, { "url": "https://murauchi.com/static-pages/privacy/pressrelease.html", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-055", "organization": "大阪市行政委員会事務局", "supplied": { "date": "2026-09-15", "dateMeaning": "unverified", "count": { "text": "106人", "value": 106, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "osaka-recruitment-vendor-2026" ], "verified": { "summary": { "ja": "録画面接システム事業者のデータ分析ツールが不正アクセスを受けました。事業者名と技術的な原因は本文にありません。 大阪市の採用試験申込者106人の個人情報に漏洩の可能性があります。", "en": "The recorded-interview provider’s analytics tool was accessed; the provider name and technical cause are absent from the notice. Personal information about 106 Osaka City recruitment applicants may have leaked." }, "disclosedAt": "2026-09-15", "sourceUrls": [ "https://www.city.osaka.lg.jp/hodoshiryo/gyouseiiinkai/0000687493.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "録画面接システム事業者のデータ分析ツールが不正アクセスを受けました。事業者名と技術的な原因は本文にありません。", "en": "The recorded-interview provider’s analytics tool was accessed; the provider name and technical cause are absent from the notice." }, "locator": "§§1-3", "sourceUrls": [ "https://www.city.osaka.lg.jp/hodoshiryo/gyouseiiinkai/0000687493.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "大阪市の採用試験申込者106人の個人情報に漏洩の可能性があります。", "en": "Personal information about 106 Osaka City recruitment applicants may have leaked." }, "locator": "§§1-3", "sourceUrls": [ "https://www.city.osaka.lg.jp/hodoshiryo/gyouseiiinkai/0000687493.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.city.osaka.lg.jp/hodoshiryo/gyouseiiinkai/0000687493.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-056", "organization": "NTTドコモ", "supplied": { "date": "2026-09-15", "dateMeaning": "unverified", "count": { "text": "約34万人", "value": 340000, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "NTTドコモのAmazonへの情報提供について、対応する一次発表を確認できませんでした。約34万人を端末侵害による被害へ読み替えません。", "en": "A corresponding first-party statement on the Docomo/Amazon data provision was not verified. The supplied approximately 340,000 people are not assigned to an endpoint compromise." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "NTTドコモのAmazonへの情報提供について、対応する一次発表を確認できませんでした。約34万人を端末侵害による被害へ読み替えません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-057", "organization": "あいの風とやま鉄道", "supplied": { "date": "2026-09-15", "dateMeaning": "unverified", "count": { "text": "1,409人", "value": 1409, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "ainokaze-reservations-2026" ], "verified": { "summary": { "ja": "座席管理システムに9月2日から8日まで複数回の不正アクセスがありました。原因は調査中です。 1,409人の情報に漏えいのおそれがあります。決済は独立システムで、カード情報は保持していません。", "en": "The reservation system was accessed repeatedly between September 2 and 8; the cause is under investigation. Information for 1,409 customers may have leaked; card payment was processed in an independent system." }, "disclosedAt": "2026-09-15", "sourceUrls": [ "https://ainokaze.co.jp/24166" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "座席管理システムに9月2日から8日まで複数回の不正アクセスがありました。原因は調査中です。", "en": "The reservation system was accessed repeatedly between September 2 and 8; the cause is under investigation." }, "locator": "§§1-4 / Q4", "sourceUrls": [ "https://ainokaze.co.jp/24166" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "1,409人の情報に漏えいのおそれがあります。決済は独立システムで、カード情報は保持していません。", "en": "Information for 1,409 customers may have leaked; card payment was processed in an independent system." }, "locator": "§§1-4 / Q4", "sourceUrls": [ "https://ainokaze.co.jp/24166" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://ainokaze.co.jp/24166", "https://ainokaze.co.jp/wp-content/uploads/2026/09/6f52a51d7d840aedb7b617d8c92c6626.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-058", "organization": "プルデンシャル生命", "supplied": { "date": "2026-09-14", "dateMeaning": "unverified", "count": { "text": "1,570人", "value": 1570, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "元営業社員が帳票を持ち出し、退職後に紛失した事案です。私用端末に連絡先も残っていました。1,570人の対象を確認しましたが、外部からの不正アクセスではないため、事故集計とは分けて保存します。", "en": "A salesperson took paper documents which were then lost. The primary notice covers 1,570 people; this is not recorded as remote intrusion." }, "disclosedAt": "2026-07-07", "sourceUrls": [ "https://www.prudential.co.jp/news/pdf/1028/20260914.pdf" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 1570, \"unit\": \"people\", \"scope\": \"clients associated with the former employee\"}]", "en": "Primary-source breakdown: [{\"value\": 1570, \"unit\": \"people\", \"scope\": \"clients associated with the former employee\"}]" }, "sourceUrls": [ "https://www.prudential.co.jp/news/pdf/1028/20260914.pdf" ], "locator": "pp.1-2 §§1-4" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://www.prudential.co.jp/news/pdf/1028/20260914.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-059", "organization": "デジタル庁", "supplied": { "date": "2026-09-11", "dateMeaning": "unverified", "count": { "text": "24.6万件", "value": 246000, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "digital-agency-gss-2026" ], "verified": { "summary": { "ja": "24.6万件は流出の可能性。事前に公表されたVPN脆弱性への修正が未適用でした。", "en": "Reviewed against the cited primary notice; see linked catalog claims for confirmed scope and corrections." }, "disclosedAt": "2026-09-11", "sourceUrls": [ "https://www.digital.go.jp/press/5fc99139-a4e2-4b7b-8b0c-d475e926143f" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "侵入前に公表されていたVPNの脆弱性への修正が未適用でした。公表時の深刻度はMediumでした。", "en": "A previously disclosed VPN vulnerability remained unpatched; its published severity was Medium." }, "locator": "Q&A：原因と脆弱性の対応", "sourceUrls": [ "https://www.digital.go.jp/press/5fc99139-a4e2-4b7b-8b0c-d475e926143f" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "約24万6千件は流出の可能性がある範囲です。確定した流出件数ではありません。", "en": "About 246,000 records are potentially exposed, not a confirmed exfiltration count." }, "locator": "Q&A：流出の可能性", "sourceUrls": [ "https://www.digital.go.jp/press/5fc99139-a4e2-4b7b-8b0c-d475e926143f" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://www.digital.go.jp/news/2026-0911-01", "https://www.digital.go.jp/press/5fc99139-a4e2-4b7b-8b0c-d475e926143f" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-060", "organization": "日本エネルギー経済研究所", "supplied": { "date": "2026-09-11", "dateMeaning": "unverified", "count": { "text": "795件", "value": 795, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "ieej-mail-2026" ], "verified": { "summary": { "ja": "所員6人のMicrosoft 365へ不正アクセスされ、ファイルのダウンロードも確認しました。 メール等759件、氏名等23件に漏えいの可能性があり、パスポート13件の流出を確認しました。", "en": "Six staff Microsoft 365 accounts were compromised and file downloads confirmed. 759 email-related and 23 name-related records may have leaked; theft of 13 passport records is confirmed." }, "disclosedAt": "2026-09-11", "sourceUrls": [ "https://eneken.ieej.or.jp/press/press261002.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "所員6人のMicrosoft 365へ不正アクセスされ、ファイルのダウンロードも確認しました。", "en": "Six staff Microsoft 365 accounts were compromised and file downloads confirmed." }, "locator": "続報 pp.1-2 §§1-3", "sourceUrls": [ "https://eneken.ieej.or.jp/press/press261002.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "メール等759件、氏名等23件に漏えいの可能性があり、パスポート13件の流出を確認しました。", "en": "759 email-related and 23 name-related records may have leaked; theft of 13 passport records is confirmed." }, "locator": "続報 pp.1-2 §§1-3", "sourceUrls": [ "https://eneken.ieej.or.jp/press/press261002.pdf" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://eneken.ieej.or.jp/press/press260911.pdf", "https://eneken.ieej.or.jp/press/press261002.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-061", "organization": "富士市", "supplied": { "date": "2026-09-11", "dateMeaning": "unverified", "count": { "text": "約800件", "value": 800, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "applynow-bi-2026" ], "verified": { "summary": { "ja": "ApplyNowの不正アクセスにより、富士市の応募者情報が流出しました。 続報で815件の漏洩を確認しました。初報の約800件の可能性から更新されました。動画は対象外です。", "en": "The ApplyNow intrusion leaked Fuji City applicants’ information. The follow-up confirmed 815 leaked records, updating the provisional estimate of about 800; videos were excluded." }, "disclosedAt": "2026-09-09", "sourceUrls": [ "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html", "https://applynow.co.jp/news/20260909", "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf", "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託先ApplyNowのデータ分析ツールの脆弱性を悪用されました。契約終了後も応募者情報が残っていました。", "en": "A vulnerability in outsourced ApplyNow analytics was exploited; applicant data remained after contract termination." }, "locator": "p.1 §1-2 / p.2 §4", "sourceUrls": [ "https://applynow.co.jp/news/20260909", "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "吉野家応募者4,998件、はなまる応募者368件、採用担当者418アカウントが対象です。件数と人数は一致しません。", "en": "Scope includes 4,998 Yoshinoya applications, 368 Hanamaru applications, and 418 recruiter accounts; records are not distinct-person counts." }, "locator": "p.1 §1-2 / p.2 §4", "sourceUrls": [ "https://www.yoshinoya.com/wp-content/uploads/2026/09/30185541/news_2026093004.pdf" ] }, { "topic": "entry", "status": "confirmed", "text": { "ja": "委託していたApplyNowのシステムに不正アクセスがありました。", "en": "The previously contracted ApplyNow platform was accessed without authorization." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "橿原市の2020年度応募者313件が対象の可能性があります。件数は調査中で未確定です。画像・動画は別領域で対象外です。", "en": "313 Kashihara application records may be affected; the count remains provisional. Separately stored images and videos were excluded." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://www.city.kashihara.nara.jp/material/files/group/1/Press_080918_dougasenkou.pdf" ] }, { "topic": "entry", "status": "confirmed", "text": { "ja": "ApplyNowの不正アクセスにより、富士市の応募者情報が流出しました。", "en": "The ApplyNow intrusion leaked Fuji City applicants’ information." }, "locator": "10月7日続報 流出した個人情報 / 今後の対応", "sourceUrls": [ "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "続報で815件の漏洩を確認しました。初報の約800件の可能性から更新されました。動画は対象外です。", "en": "The follow-up confirmed 815 leaked records, updating the provisional estimate of about 800; videos were excluded." }, "locator": "10月7日続報 流出した個人情報 / 今後の対応", "sourceUrls": [ "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://www.city.fuji.shizuoka.jp/1005250000/p007780.html", "https://www.city.fuji.shizuoka.jp/1005250000/p007783.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-062", "organization": "扶桑電通", "supplied": { "date": "2026-09-10", "dateMeaning": "unverified", "count": { "text": "2万6,489件", "value": 26489, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "fuso-cloud-storage-2026" ], "verified": { "summary": { "ja": "クラウドストレージの認証情報が不正利用されました。認証情報を取得した具体的経路は特定できていません。 共有フォルダの取引先情報26,489件に漏えいの可能性があります。", "en": "Cloud-storage credentials were abused; their acquisition route has not been identified. Shared files contained 26,489 customer/contact records potentially exposed." }, "disclosedAt": "2026-07-22", "sourceUrls": [ "https://www.fusodentsu.co.jp/news/news_cp_20260910.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "クラウドストレージの認証情報が不正利用されました。認証情報を取得した具体的経路は特定できていません。", "en": "Cloud-storage credentials were abused; their acquisition route has not been identified." }, "locator": "第2報 §§1-3", "sourceUrls": [ "https://www.fusodentsu.co.jp/news/news_cp_20260910.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "共有フォルダの取引先情報26,489件に漏えいの可能性があります。", "en": "Shared files contained 26,489 customer/contact records potentially exposed." }, "locator": "第2報 §§1-3", "sourceUrls": [ "https://www.fusodentsu.co.jp/news/news_cp_20260910.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-04.shtm" ], "attemptedSourceUrls": [ "https://www.fusodentsu.co.jp/news/news_cp_20260722.html", "https://www.fusodentsu.co.jp/news/news_cp_20260910.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-063", "organization": "埼玉県", "supplied": { "date": "2026-09-10", "dateMeaning": "unverified", "count": { "text": "536人", "value": 536, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "情報開示の電子文書のマスキング方法が不適切で、延べ536人の不開示情報が復元可能でした。外部侵入ではなく文書の不開示処理の事故として分けます。", "en": "A document-redaction method failed to remove personal information, with 536 cumulative affected people. This document-handling error is outside intrusion counts." }, "disclosedAt": "2026-09-10", "sourceUrls": [ "https://www.pref.saitama.lg.jp/a0204/news/page/news2026091001.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 536, \"unit\": \"people\", \"qualifiers\": [\"cumulative\"], \"scope\": \"redacted student records\"}]", "en": "Primary-source breakdown: [{\"value\": 536, \"unit\": \"people\", \"qualifiers\": [\"cumulative\"], \"scope\": \"redacted student records\"}]" }, "sourceUrls": [ "https://www.pref.saitama.lg.jp/a0204/news/page/news2026091001.html" ], "locator": "§§1-5" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-05.shtm" ], "attemptedSourceUrls": [ "https://www.pref.saitama.lg.jp/a0204/news/page/news2026091001.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-064", "organization": "京都サンガ", "supplied": { "date": "2026-09-08", "dateMeaning": "unverified", "count": { "text": "1万5,612件", "value": 15612, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "京都サンガの該当一次発表は取得に失敗し、ブラウザでも保守画面でした。メール誤送信や15,612件の二次情報は未検証です。", "en": "The official Sanga notice could not be fetched and the rendered site was under maintenance. The alleged 15,612-record mis-send remains unverified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "京都サンガの該当一次発表は取得に失敗し、ブラウザでも保守画面でした。メール誤送信や15,612件の二次情報は未検証です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-05.shtm" ], "attemptedSourceUrls": [ "https://www.sanga-fc.jp/news/detail/21401" ], "retrievalFailures": [ { "url": "https://www.sanga-fc.jp/news/detail/21401", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-065", "organization": "ファイブフォックス", "supplied": { "date": "2026-09-08", "dateMeaning": "unverified", "count": { "text": "7万3,185件", "value": 73185, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "five-foxes-2026" ], "verified": { "summary": { "ja": "グループの一部システムへの不正アクセスを7月8日に確認しました。侵入経路は未公表です。 顧客59,504件、問合せ8,403件、従業員2,450件と2,828件に流出の可能性があります。件数の合計は73,185件で、人数とは区別します。", "en": "Unauthorized access to group systems was detected on July 8; the entry route is undisclosed. Potentially affected datasets contain 59,504 member, 8,403 inquiry, 2,450 and 2,828 employee records; the 73,185-record total is not a unique-person count." }, "disclosedAt": "2026-07-14", "sourceUrls": [ "https://www.fivefoxes.co.jp/2026/09/post-23.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "グループの一部システムへの不正アクセスを7月8日に確認しました。侵入経路は未公表です。", "en": "Unauthorized access to group systems was detected on July 8; the entry route is undisclosed." }, "locator": "第2報 §§1-4", "sourceUrls": [ "https://www.fivefoxes.co.jp/2026/09/post-23.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "顧客59,504件、問合せ8,403件、従業員2,450件と2,828件に流出の可能性があります。件数の合計は73,185件で、人数とは区別します。", "en": "Potentially affected datasets contain 59,504 member, 8,403 inquiry, 2,450 and 2,828 employee records; the 73,185-record total is not a unique-person count." }, "locator": "第2報 §§1-4", "sourceUrls": [ "https://www.fivefoxes.co.jp/2026/09/post-23.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-05.shtm" ], "attemptedSourceUrls": [ "https://www.fivefoxes.co.jp/2026/07/post-20.html", "https://www.fivefoxes.co.jp/2026/09/post-23.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-066", "organization": "コープやまぐち", "supplied": { "date": "2026-09-07", "dateMeaning": "unverified", "count": { "text": "21万7,295件", "value": 217295, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "coop-yamaguchi-2026" ], "verified": { "summary": { "ja": "外部委託のLINEミニアプリ用DBが不正アクセスされ、全データを削除されました。LINEヤフーのDBの事故ではありません。 対象範囲は69,586件、143,126件、365件、4,218件の4区分です。計217,295件は対象データ数で、流出は未確認です。", "en": "The outsourced mini-app database was accessed and deleted; this was not a LINE Yahoo database incident. The four affected datasets contain 69,586, 143,126, 365 and 4,218 records; the 217,295-record total describes potential scope, not confirmed theft." }, "disclosedAt": "2026-08-28", "sourceUrls": [ "https://www.yamaguti-coop.or.jp/line-miniapp-incident-report2/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "外部委託のLINEミニアプリ用DBが不正アクセスされ、全データを削除されました。LINEヤフーのDBの事故ではありません。", "en": "The outsourced mini-app database was accessed and deleted; this was not a LINE Yahoo database incident." }, "locator": "第2報 §§1,2,5", "sourceUrls": [ "https://www.yamaguti-coop.or.jp/line-miniapp-incident-report2/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "対象範囲は69,586件、143,126件、365件、4,218件の4区分です。計217,295件は対象データ数で、流出は未確認です。", "en": "The four affected datasets contain 69,586, 143,126, 365 and 4,218 records; the 217,295-record total describes potential scope, not confirmed theft." }, "locator": "第2報 §§1,2,5", "sourceUrls": [ "https://www.yamaguti-coop.or.jp/line-miniapp-incident-report2/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-05.shtm" ], "attemptedSourceUrls": [ "https://www.yamaguti-coop.or.jp/line-miniapp-incident-report/", "https://www.yamaguti-coop.or.jp/line-miniapp-incident-report2/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-067", "organization": "WEVERSE JAPAN", "supplied": { "date": "2026-09-06", "dateMeaning": "unverified", "count": { "text": "42万2,584件", "value": 422584, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "weverse-payment-api-2026" ], "verified": { "summary": { "ja": "外部の脆弱性指摘を受けて調査し、決済情報APIの情報流出を確認しました。アクセス制御を強化しています。 アカウントID基準で422,584件の内部識別値などが流出しました。氏名・連絡先やカード番号の流出とは公表されていません。日本の利用者だけの件数とは示されていません。", "en": "Following an external vulnerability report, the company confirmed payment-API disclosure and strengthened access controls. 422,584 account IDs’ internal identifiers and transaction metadata were disclosed; names, contacts and card numbers were not reported leaked. The count is not stated to cover Japan alone." }, "disclosedAt": "2026-09-06", "sourceUrls": [ "https://shop.weverse.io/ja/shop/JPY/artists/0/notices/14265" ], "claims": [ { "topic": "entry", "status": "inferred", "text": { "ja": "外部の脆弱性指摘を受けて調査し、決済情報APIの情報流出を確認しました。アクセス制御を強化しています。", "en": "Following an external vulnerability report, the company confirmed payment-API disclosure and strengthened access controls." }, "locator": "§§1-2", "sourceUrls": [ "https://shop.weverse.io/ja/shop/JPY/artists/0/notices/14265" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "アカウントID基準で422,584件の内部識別値などが流出しました。氏名・連絡先やカード番号の流出とは公表されていません。日本の利用者だけの件数とは示されていません。", "en": "422,584 account IDs’ internal identifiers and transaction metadata were disclosed; names, contacts and card numbers were not reported leaked. The count is not stated to cover Japan alone." }, "locator": "§§1-2", "sourceUrls": [ "https://shop.weverse.io/ja/shop/JPY/artists/0/notices/14265" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-05.shtm" ], "attemptedSourceUrls": [ "https://shop.weverse.io/ja/shop/JPY/artists/0/notices/14265" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-068", "organization": "大阪高等裁判所", "supplied": { "date": "2026-09-04", "dateMeaning": "unverified", "count": { "text": "約6,000件", "value": 6000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued-partial", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "osaka-high-court-teams-2026" ], "verified": { "summary": { "ja": "事件用Teamsチームに本来の参加者以外を誤って登録しました。外部からの侵入ではありません。 外部約3,500、職員約2,500アカウントが登録され、ユーザー名とメールが相互閲覧可能でした。事件記録は対象外です。", "en": "A case-specific Teams group mistakenly included unintended members; no external intrusion was reported. Approximately 3,500 external and 2,500 staff accounts could see each other’s names and email addresses; case records were unaffected." }, "disclosedAt": null, "sourceUrls": [ "https://www.courts.go.jp/osaka-h/about/osirase/owabi/index.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "事件用Teamsチームに本来の参加者以外を誤って登録しました。外部からの侵入ではありません。", "en": "A case-specific Teams group mistakenly included unintended members; no external intrusion was reported." }, "locator": "本文 第1-2段落", "sourceUrls": [ "https://www.courts.go.jp/osaka-h/about/osirase/owabi/index.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "外部約3,500、職員約2,500アカウントが登録され、ユーザー名とメールが相互閲覧可能でした。事件記録は対象外です。", "en": "Approximately 3,500 external and 2,500 staff accounts could see each other’s names and email addresses; case records were unaffected." }, "locator": "本文 第1-2段落", "sourceUrls": [ "https://www.courts.go.jp/osaka-h/about/osirase/owabi/index.html" ] } ] }, "gaps": [ { "ja": "初報日を一次資料で確認できていません。", "en": "The first disclosure date is not established by primary evidence." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-05.shtm" ], "attemptedSourceUrls": [ "https://www.courts.go.jp/osaka-h/about/osirase/owabi/index.html" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-069", "organization": "大田区文化振興協会", "supplied": { "date": "2026-09-04", "dateMeaning": "unverified", "count": { "text": "556人", "value": 556, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "ota-cultural-pc-scam-2026" ], "verified": { "summary": { "ja": "偽警告の連絡先へ電話し、指示に従った業務端末が遠隔操作されたとみられます。 施設利用者・職員計556人の情報へアクセス可能でした。外部への流出は調査中です。", "en": "A staff member called a fake alert’s number and followed instructions; remote control of the work computer is suspected. Data about 556 facility users and staff was accessible; external disclosure remains under investigation." }, "disclosedAt": "2026-09-04", "sourceUrls": [ "https://www.ota-bunka.or.jp/news/detail?110295" ], "claims": [ { "topic": "entry", "status": "inferred", "text": { "ja": "偽警告の連絡先へ電話し、指示に従った業務端末が遠隔操作されたとみられます。", "en": "A staff member called a fake alert’s number and followed instructions; remote control of the work computer is suspected." }, "locator": "§§1-5", "sourceUrls": [ "https://www.ota-bunka.or.jp/news/detail?110295" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "施設利用者・職員計556人の情報へアクセス可能でした。外部への流出は調査中です。", "en": "Data about 556 facility users and staff was accessible; external disclosure remains under investigation." }, "locator": "§§1-5", "sourceUrls": [ "https://www.ota-bunka.or.jp/news/detail?110295" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.ota-bunka.or.jp/news/detail?110295" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-070", "organization": "鴨川市", "supplied": { "date": "2026-09-04", "dateMeaning": "unverified", "count": { "text": "218人", "value": 218, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "kamogawa-form-exposure-2026" ], "verified": { "summary": { "ja": "アンケートの設定確認が不十分で、回答者が過去の回答者情報を閲覧できました。 218人の氏名・住所・電話番号が対象です。続報でメールアドレスは対象外と訂正されました。", "en": "Inadequate survey-permission checking allowed respondents to view earlier submissions. Names, addresses and telephone numbers for 218 respondents were exposed; the follow-up excluded email addresses." }, "disclosedAt": "2026-09-09", "sourceUrls": [ "https://www.city.kamogawa.lg.jp/site/furusatotax/45030.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "アンケートの設定確認が不十分で、回答者が過去の回答者情報を閲覧できました。", "en": "Inadequate survey-permission checking allowed respondents to view earlier submissions." }, "locator": "事案の概要 / 原因 / 続報（9月9日）", "sourceUrls": [ "https://www.city.kamogawa.lg.jp/site/furusatotax/45030.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "218人の氏名・住所・電話番号が対象です。続報でメールアドレスは対象外と訂正されました。", "en": "Names, addresses and telephone numbers for 218 respondents were exposed; the follow-up excluded email addresses." }, "locator": "事案の概要 / 原因 / 続報（9月9日）", "sourceUrls": [ "https://www.city.kamogawa.lg.jp/site/furusatotax/45030.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-05.shtm" ], "attemptedSourceUrls": [ "https://www.city.kamogawa.lg.jp/site/furusatotax/45030.html", "https://www.city.kamogawa.lg.jp/soshiki/25/45030.html" ], "retrievalFailures": [ { "url": "https://www.city.kamogawa.lg.jp/soshiki/25/45030.html", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": false }, { "id": "U2026-071", "organization": "RIZAP", "supplied": { "date": "2026-09-03", "dateMeaning": "unverified", "count": { "text": "1万9,996人", "value": 19996, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "RIZAPの全体19,996人を説明する一次資料を確認できませんでした。IHI健康保険組合が確認した210人の資料は別候補U2026-073へ接続し、全体人数の根拠には使いません。", "en": "The RIZAP-wide 19,996-person figure was not verified. The IHI fund’s separate 210-person notice is linked to U2026-073 and does not establish the overall total." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "RIZAPの全体19,996人を説明する一次資料を確認できませんでした。IHI健康保険組合が確認した210人の資料は別候補U2026-073へ接続し、全体人数の根拠には使いません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [ "https://rizap.co.jp/news/vNh1nMuA", "https://rizap.co.jp/news/yWfsq_08" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-072", "organization": "チャーム", "supplied": { "date": "2026-09-02", "dateMeaning": "unverified", "count": { "text": "約39万件", "value": 390000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "charm-2026" ], "verified": { "summary": { "ja": "通販サイトへの不正アクセスを確認しました。メール・パスワードの入手経路は特定できていません。 精査後約37万件は流出確認、約2万件は未確定です。239人の不正ログインも確認しました。", "en": "The online store was accessed without authorization; credential acquisition has not been identified. After review, about 370,000 records are confirmed leaked and 20,000 remain uncertain; 239 user accounts were accessed." }, "disclosedAt": "2026-08-13", "sourceUrls": [ "https://www.charm.co.jp/honten/info/notice/20260901.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "通販サイトへの不正アクセスを確認しました。メール・パスワードの入手経路は特定できていません。", "en": "The online store was accessed without authorization; credential acquisition has not been identified." }, "locator": "第3報 9月2日更新 / §§1-3", "sourceUrls": [ "https://www.charm.co.jp/honten/info/notice/20260901.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "精査後約37万件は流出確認、約2万件は未確定です。239人の不正ログインも確認しました。", "en": "After review, about 370,000 records are confirmed leaked and 20,000 remain uncertain; 239 user accounts were accessed." }, "locator": "第3報 9月2日更新 / §§1-3", "sourceUrls": [ "https://www.charm.co.jp/honten/info/notice/20260901.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://charm.co.jp/honten/info/notice/20260813.html", "https://charm.co.jp/honten/info/notice/20260820.html", "https://www.charm.co.jp/honten/info/notice/20260901.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-073", "organization": "IHIグループ健康保険組合", "supplied": { "date": "2026-09-02", "dateMeaning": "unverified", "count": { "text": "210人", "value": 210, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "rizap-ai-data-handling-2026" ], "verified": { "summary": { "ja": "委託先RIZAPの従業員が、データ抽出の際に保健指導対象者の個人情報を生成AIへ参照させました。攻撃者によるAI利用ではありません。 IHI健保の対象は210人です。AI提供事業者以外の閲覧とモデル学習の可能性はないと事業者への照会で確認したと報告しています。", "en": "A RIZAP employee submitted health-guidance data to generative AI during extraction; this is not evidence of attacker AI use. The IHI fund identified 210 affected members and reports that the AI provider ruled out access by other parties and training use." }, "disclosedAt": "2026-09-02", "sourceUrls": [ "https://www.ihikenpo.or.jp/asp/news/news.asp?articleid=189769&page=1" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託先RIZAPの従業員が、データ抽出の際に保健指導対象者の個人情報を生成AIへ参照させました。攻撃者によるAI利用ではありません。", "en": "A RIZAP employee submitted health-guidance data to generative AI during extraction; this is not evidence of attacker AI use." }, "locator": "2026/09/02 本文", "sourceUrls": [ "https://www.ihikenpo.or.jp/asp/news/news.asp?articleid=189769&page=1" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "IHI健保の対象は210人です。AI提供事業者以外の閲覧とモデル学習の可能性はないと事業者への照会で確認したと報告しています。", "en": "The IHI fund identified 210 affected members and reports that the AI provider ruled out access by other parties and training use." }, "locator": "2026/09/02 本文", "sourceUrls": [ "https://www.ihikenpo.or.jp/asp/news/news.asp?articleid=189769&page=1" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [ "https://www.ihikenpo.or.jp/asp/news/news.asp?articleid=189769&page=1" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-074", "organization": "三井不動産", "supplied": { "date": "2026-09-01", "dateMeaning": "unverified", "count": { "text": "最大5万5,000件", "value": 55000, "unit": "件", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "mitsui-fudosan-directory-2026" ], "verified": { "summary": { "ja": "業務システムの資格情報が不正利用されました。取得経路は調査中です。 役職員等は最大19,000件、社外関係者は最大36,000件です。全件取得を確認した数字ではありません。", "en": "Business-system credentials were abused; acquisition is under investigation. Maximum potential scope is 19,000 employee and 36,000 external-contact records; these are not confirmed theft counts." }, "disclosedAt": "2026-09-01", "sourceUrls": [ "https://www.mitsuifudosan.co.jp/letter/260901/download/260901.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "業務システムの資格情報が不正利用されました。取得経路は調査中です。", "en": "Business-system credentials were abused; acquisition is under investigation." }, "locator": "pp.1-2 §§1-3", "sourceUrls": [ "https://www.mitsuifudosan.co.jp/letter/260901/download/260901.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "役職員等は最大19,000件、社外関係者は最大36,000件です。全件取得を確認した数字ではありません。", "en": "Maximum potential scope is 19,000 employee and 36,000 external-contact records; these are not confirmed theft counts." }, "locator": "pp.1-2 §§1-3", "sourceUrls": [ "https://www.mitsuifudosan.co.jp/letter/260901/download/260901.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [ "https://mitsui-shopping-park.com/lalaport/ebina/info/3621477.html", "https://www.mitsuifudosan.co.jp/letter/260901/download/260901.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-075", "organization": "千葉県生物多様性センター", "supplied": { "date": "2026-09-01", "dateMeaning": "unverified", "count": { "text": "1,963人", "value": 1963, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "chiba-biodiversity-2026" ], "verified": { "summary": { "ja": "団員用サイトに不正アクセスされ、通常存在しないページを挿入されました。侵入原因は未公表です。 登録団員は1,963人ですが、約1,500人のサーバー上の情報は氏名等のみです。住所などは別名簿にある場合があり、全項目の流出を意味しません。流出は未確認です。", "en": "The member site was accessed and unauthorized pages inserted; the entry cause is undisclosed. There are 1,963 members; about 1,500 have only names or nicknames on the server. Other fields may be stored separately; complete-record leakage is not established." }, "disclosedAt": "2026-09-01", "sourceUrls": [ "https://www.pref.chiba.lg.jp/shizen/press/2026/260901hompageerror.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "団員用サイトに不正アクセスされ、通常存在しないページを挿入されました。侵入原因は未公表です。", "en": "The member site was accessed and unauthorized pages inserted; the entry cause is undisclosed." }, "locator": "§§1-5", "sourceUrls": [ "https://www.pref.chiba.lg.jp/shizen/press/2026/260901hompageerror.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "登録団員は1,963人ですが、約1,500人のサーバー上の情報は氏名等のみです。住所などは別名簿にある場合があり、全項目の流出を意味しません。流出は未確認です。", "en": "There are 1,963 members; about 1,500 have only names or nicknames on the server. Other fields may be stored separately; complete-record leakage is not established." }, "locator": "§§1-5", "sourceUrls": [ "https://www.pref.chiba.lg.jp/shizen/press/2026/260901hompageerror.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.pref.chiba.lg.jp/shizen/press/2026/260901hompageerror.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-076", "organization": "TRUNK", "supplied": { "date": "2026-09-01", "dateMeaning": "unverified", "count": { "text": "424件", "value": 424, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "trunk-mail-2026" ], "verified": { "summary": { "ja": "従業員メールへの不正アクセスと、そのアカウントを使ったなりすまし送信を確認しました。認証突破の方法は未公表です。 漏えいした可能性のある情報は424件です。", "en": "Employee email was compromised and used for impersonation messages; the authentication bypass mechanism is undisclosed. Potentially exposed personal data totals 424 records." }, "disclosedAt": "2026-09-01", "sourceUrls": [ "https://www.trunk-base.com/company/news/20260901/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "従業員メールへの不正アクセスと、そのアカウントを使ったなりすまし送信を確認しました。認証突破の方法は未公表です。", "en": "Employee email was compromised and used for impersonation messages; the authentication bypass mechanism is undisclosed." }, "locator": "§§1-3", "sourceUrls": [ "https://www.trunk-base.com/company/news/20260901/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "漏えいした可能性のある情報は424件です。", "en": "Potentially exposed personal data totals 424 records." }, "locator": "§§1-3", "sourceUrls": [ "https://www.trunk-base.com/company/news/20260901/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [ "https://www.trunk-base.com/company/news/20260901/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-077", "organization": "関西学院大学", "supplied": { "date": "2026-09-01", "dateMeaning": "unverified", "count": { "text": "1,448人", "value": 1448, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "kwansei-external-sns-2026" ], "verified": { "summary": { "ja": "学外SNS上の授業資料で公開範囲の設定・管理が不十分で、学生情報が一般公開またはSNS会員へ公開されました。 対象学生・卒業生は1,448人で、氏名・成績・写真等の項目と公開期間は授業ごとに異なります。", "en": "Insufficient audience controls exposed student data publicly or to members of an external social network. 1,448 students and graduates were affected; exposed fields and periods vary by course." }, "disclosedAt": "2026-09-01", "sourceUrls": [ "https://www.kwansei.ac.jp/news/06656.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "学外SNS上の授業資料で公開範囲の設定・管理が不十分で、学生情報が一般公開またはSNS会員へ公開されました。", "en": "Insufficient audience controls exposed student data publicly or to members of an external social network." }, "locator": "§§1-7", "sourceUrls": [ "https://www.kwansei.ac.jp/news/06656.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "対象学生・卒業生は1,448人で、氏名・成績・写真等の項目と公開期間は授業ごとに異なります。", "en": "1,448 students and graduates were affected; exposed fields and periods vary by course." }, "locator": "§§1-7", "sourceUrls": [ "https://www.kwansei.ac.jp/news/06656.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [ "https://www.kwansei.ac.jp/news/06656.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-078", "organization": "新潟市立山潟中学校", "supplied": { "date": "2026-08-31", "dateMeaning": "unverified", "count": { "text": "387人", "value": 387, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "新潟市立山潟中学校の387人について、個別事故の一次資料を確認できませんでした。書類紛失という二次情報は確定分類へ使いません。", "en": "The corresponding first-party school notice was not located; the alleged 387-person paper-loss scope remains unverified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "新潟市立山潟中学校の387人について、個別事故の一次資料を確認できませんでした。書類紛失という二次情報は確定分類へ使いません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-079", "organization": "青森みちのく銀行", "supplied": { "date": "2026-08-31", "dateMeaning": "unverified", "count": { "text": "約1万3,700件", "value": 13700, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "店舗統合の確認で顧客書類約13,700件の紛失が判明しました。保存期限前の箱を誤廃棄した可能性が高いとする紙資料の管理事故で、外部侵入の記録には加えません。", "en": "Paper boxes containing about 13,700 records were discarded. Physical disposal is excluded from remote-intrusion counts." }, "disclosedAt": "2026-08-31", "sourceUrls": [ "https://www.am-bk.co.jp/news/docs/important_20260831.pdf" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 13700, \"unit\": \"records\", \"qualifiers\": [\"approximate\"], \"scope\": \"missing paper documents\"}]", "en": "Primary-source breakdown: [{\"value\": 13700, \"unit\": \"records\", \"qualifiers\": [\"approximate\"], \"scope\": \"missing paper documents\"}]" }, "sourceUrls": [ "https://www.am-bk.co.jp/news/docs/important_20260831.pdf" ], "locator": "pp.1-2 §§1-4" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [ "https://www.am-bk.co.jp/news/docs/important_20260831.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-080", "organization": "イエローハット", "supplied": { "date": "2026-08-28", "dateMeaning": "unverified", "count": { "text": "約180万1,499人", "value": 1801499, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "yellowhat-booking-2026" ], "verified": { "summary": { "ja": "作業予約システムに対する不正プログラムの攻撃を確認しました。具体的な侵入方法は未公表です。 最大1,801,499人の会員情報に漏えいの可能性があります。カード情報等は保有していません。", "en": "Malicious-program activity targeted the booking system; the entry mechanism is undisclosed. Potential exposure concerns up to 1,801,499 members; card information was not stored." }, "disclosedAt": "2026-08-28", "sourceUrls": [ "https://www.yellowhat.jp/information/yellowhat/202608.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "作業予約システムに対する不正プログラムの攻撃を確認しました。具体的な侵入方法は未公表です。", "en": "Malicious-program activity targeted the booking system; the entry mechanism is undisclosed." }, "locator": "§§1-3", "sourceUrls": [ "https://www.yellowhat.jp/information/yellowhat/202608.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大1,801,499人の会員情報に漏えいの可能性があります。カード情報等は保有していません。", "en": "Potential exposure concerns up to 1,801,499 members; card information was not stored." }, "locator": "§§1-3", "sourceUrls": [ "https://www.yellowhat.jp/information/yellowhat/202608.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [ "https://2rinkan.jp/annai/20260423/", "https://www.yellowhat.jp/information/yellowhat/202608.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-081", "organization": "カインドオル", "supplied": { "date": "2026-08-28", "dateMeaning": "unverified", "count": { "text": "13万6,464人", "value": 136464, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "kindal-phishing-2026" ], "verified": { "summary": { "ja": "偽EC運営会社のメール先へ従業員が認証情報を入力しました。スタッフアカウントには二段階認証が未設定でした。 8月23日に顧客データを2回一括出力され、対象は136,464人です。", "en": "An employee entered staff credentials into a phishing site; the account lacked two-step authentication. Two bulk exports occurred on August 23, affecting 136,464 customers." }, "disclosedAt": "2026-08-28", "sourceUrls": [ "https://www.kind.co.jp/notice-20260828" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "偽EC運営会社のメール先へ従業員が認証情報を入力しました。スタッフアカウントには二段階認証が未設定でした。", "en": "An employee entered staff credentials into a phishing site; the account lacked two-step authentication." }, "locator": "§§1-4,6", "sourceUrls": [ "https://www.kind.co.jp/notice-20260828" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "8月23日に顧客データを2回一括出力され、対象は136,464人です。", "en": "Two bulk exports occurred on August 23, affecting 136,464 customers." }, "locator": "§§1-4,6", "sourceUrls": [ "https://www.kind.co.jp/notice-20260828" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [ "https://shop.kind.co.jp/blogs/news/notice-20260828", "https://www.kind.co.jp/notice-20260828" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-082", "organization": "コロナ", "supplied": { "date": "2026-08-28", "dateMeaning": "unverified", "count": { "text": "最大3万5,000人", "value": 35000, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "corona-cloud-2026" ], "verified": { "summary": { "ja": "施工情報の外部クラウドサービスへの不正アクセスを確認しました。 最大35,000人の氏名・住所や施工資料が流出した可能性があります。", "en": "Unauthorized access affected an external construction-information cloud service. Names, addresses and related construction documents for up to 35,000 customers may have leaked." }, "disclosedAt": "2026-08-28", "sourceUrls": [ "https://www.corona.co.jp/news/other/post-439.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "施工情報の外部クラウドサービスへの不正アクセスを確認しました。", "en": "Unauthorized access affected an external construction-information cloud service." }, "locator": "§§1-3", "sourceUrls": [ "https://www.corona.co.jp/news/other/post-439.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大35,000人の氏名・住所や施工資料が流出した可能性があります。", "en": "Names, addresses and related construction documents for up to 35,000 customers may have leaked." }, "locator": "§§1-3", "sourceUrls": [ "https://www.corona.co.jp/news/other/post-439.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [ "https://www.corona.co.jp/news/other/post-439.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-083", "organization": "クー・トレーディング", "supplied": { "date": "2026-08-27", "dateMeaning": "unverified", "count": { "text": "2,255件", "value": 2255, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "クー・トレーディングの2,255件に対応する一次発表を特定できませんでした。同名・類似名の検索結果を根拠にしません。", "en": "A corresponding Coo Trading first-party notice for 2,255 records was not found. Similar names do not establish evidence." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "クー・トレーディングの2,255件に対応する一次発表を特定できませんでした。同名・類似名の検索結果を根拠にしません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-084", "organization": "チューリッヒ保険", "supplied": { "date": "2026-08-27", "dateMeaning": "unverified", "count": { "text": "最大1,668人", "value": 1668, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "zurich-zdash-2026" ], "verified": { "summary": { "ja": "Z-Dashで脆弱性が見つかり、4月1日と6日の不正アクセスを過去ログで確認しました。 最大1,668人の氏名・メール等が対象です。ドラレコ映像は含まれません。", "en": "A Z-Dash vulnerability was discovered; historical logs showed unauthorized access on April 1 and 6. Up to 1,668 customers may be affected; dashcam videos were excluded." }, "disclosedAt": "2026-08-27", "sourceUrls": [ "https://www.zurich.co.jp/aboutus/news/news/2026/0827/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "Z-Dashで脆弱性が見つかり、4月1日と6日の不正アクセスを過去ログで確認しました。", "en": "A Z-Dash vulnerability was discovered; historical logs showed unauthorized access on April 1 and 6." }, "locator": "概要 / 対象となるお客さま / 当社のこれまでの対応", "sourceUrls": [ "https://www.zurich.co.jp/aboutus/news/news/2026/0827/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大1,668人の氏名・メール等が対象です。ドラレコ映像は含まれません。", "en": "Up to 1,668 customers may be affected; dashcam videos were excluded." }, "locator": "概要 / 対象となるお客さま / 当社のこれまでの対応", "sourceUrls": [ "https://www.zurich.co.jp/aboutus/news/news/2026/0827/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-06.shtm" ], "attemptedSourceUrls": [ "https://www.zurich.co.jp/aboutus/news/news/2026/0827/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-085", "organization": "ファンくる", "supplied": { "date": "2026-08-24", "dateMeaning": "unverified", "count": { "text": "5万9,389人", "value": 59389, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "fancrew-credential-stuffing-2026" ], "verified": { "summary": { "ja": "リスト型攻撃による不正ログインを確認しました。元の認証情報の入手経路は未公表です。 不正ログイン試行5,060,270件、成功した会員59,389人です。2アカウントで不正なポイント交換を確認しました。", "en": "Credential stuffing caused unauthorized logins; the original credential source is undisclosed. There were 5,060,270 attempts and 59,389 successfully accessed member accounts; unauthorized point redemption occurred in two accounts." }, "disclosedAt": "2026-08-24", "sourceUrls": [ "https://www.fancrew.co.jp/news/news-press-release/2609_final-report-unauthorized-account-access.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "リスト型攻撃による不正ログインを確認しました。元の認証情報の入手経路は未公表です。", "en": "Credential stuffing caused unauthorized logins; the original credential source is undisclosed." }, "locator": "9月18日最終報 §§1-3", "sourceUrls": [ "https://www.fancrew.co.jp/news/news-press-release/2609_final-report-unauthorized-account-access.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "不正ログイン試行5,060,270件、成功した会員59,389人です。2アカウントで不正なポイント交換を確認しました。", "en": "There were 5,060,270 attempts and 59,389 successfully accessed member accounts; unauthorized point redemption occurred in two accounts." }, "locator": "9月18日最終報 §§1-3", "sourceUrls": [ "https://www.fancrew.co.jp/news/news-press-release/2609_final-report-unauthorized-account-access.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-07.shtm" ], "attemptedSourceUrls": [ "https://www.fancrew.co.jp/news/news-press-release/2608_investigation-results-regarding-unauthorized-logins-service-resumption-and-future-actions.html", "https://www.fancrew.co.jp/news/news-press-release/2608_notice-of-system-temporary-suspension-and-potential-data-breach-due-to-unauthorized-access.html", "https://www.fancrew.co.jp/news/news-press-release/2609_final-report-unauthorized-account-access.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-086", "organization": "楽天ブックスネットワーク", "supplied": { "date": "2026-08-21", "dateMeaning": "unverified", "count": { "text": "3万5,773件", "value": 35773, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "rakuten-books-pc-2026" ], "verified": { "summary": { "ja": "社内PCの一部に不正アクセスがあり、4月5日に検知しました。具体的な経路は未公表です。 配送先33,333件、取引先2,101件、従業員339件を保存していました。流出は未確認です。", "en": "Unauthorized access to some internal PCs was detected on April 5; the entry route is undisclosed. Affected PCs held 33,333 delivery, 2,101 contact and 339 employee records; leakage was not confirmed." }, "disclosedAt": "2026-08-21", "sourceUrls": [ "https://www.rakuten-booksnetwork.co.jp/2026/08/21/unauthorized-access-notice/index.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "社内PCの一部に不正アクセスがあり、4月5日に検知しました。具体的な経路は未公表です。", "en": "Unauthorized access to some internal PCs was detected on April 5; the entry route is undisclosed." }, "locator": "§§1-3", "sourceUrls": [ "https://www.rakuten-booksnetwork.co.jp/2026/08/21/unauthorized-access-notice/index.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "配送先33,333件、取引先2,101件、従業員339件を保存していました。流出は未確認です。", "en": "Affected PCs held 33,333 delivery, 2,101 contact and 339 employee records; leakage was not confirmed." }, "locator": "§§1-3", "sourceUrls": [ "https://www.rakuten-booksnetwork.co.jp/2026/08/21/unauthorized-access-notice/index.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-07.shtm" ], "attemptedSourceUrls": [ "https://www.rakuten-booksnetwork.co.jp/2026/08/21/unauthorized-access-notice/index.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-087", "organization": "愛媛県", "supplied": { "date": "2026-08-21", "dateMeaning": "unverified", "count": { "text": "5,124件", "value": 5124, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "愛媛県の5,124件について、該当事故の一次資料を確認できませんでした。公開データへの誤掲載という二次情報は未検証です。", "en": "No corresponding first-party Ehime notice was verified. The supplied 5,124-record open-data publication error remains unconfirmed." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "愛媛県の5,124件について、該当事故の一次資料を確認できませんでした。公開データへの誤掲載という二次情報は未検証です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-07.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-088", "organization": "コタ", "supplied": { "date": "2026-08-20", "dateMeaning": "unverified", "count": { "text": "延べ10万9,147件", "value": 109147, "unit": "件", "qualifiers": [ "延べ" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "cota-2026" ], "verified": { "summary": { "ja": "3月27日のPC動作不良の調査で不正アクセスが判明しました。入口は未公表です。 8区分で延べ109,147件が潜在的対象です。専門調査でも漏えいは未確認で、否定できないとして通知しています。", "en": "Investigation of PC malfunctions on March 27 identified unauthorized access; the entry route is undisclosed. Eight datasets total 109,147 potentially affected records; investigation did not confirm leakage but could not rule it out." }, "disclosedAt": "2026-03-30", "sourceUrls": [ "https://media.cota.co.jp/media/c461e507-b70e-4543-81b6-38210d442a3b.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "3月27日のPC動作不良の調査で不正アクセスが判明しました。入口は未公表です。", "en": "Investigation of PC malfunctions on March 27 identified unauthorized access; the entry route is undisclosed." }, "locator": "pp.1-2 §§1,2,4", "sourceUrls": [ "https://media.cota.co.jp/media/c461e507-b70e-4543-81b6-38210d442a3b.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "8区分で延べ109,147件が潜在的対象です。専門調査でも漏えいは未確認で、否定できないとして通知しています。", "en": "Eight datasets total 109,147 potentially affected records; investigation did not confirm leakage but could not rule it out." }, "locator": "pp.1-2 §§1,2,4", "sourceUrls": [ "https://media.cota.co.jp/media/c461e507-b70e-4543-81b6-38210d442a3b.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-07.shtm" ], "attemptedSourceUrls": [ "https://media.cota.co.jp/media/c461e507-b70e-4543-81b6-38210d442a3b.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-089", "organization": "2025年日本国際博覧会協会", "supplied": { "date": "2026-08-20", "dateMeaning": "unverified", "count": { "text": "156人", "value": 156, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued-partial", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "expo-subcontractor-mail-2026" ], "verified": { "summary": { "ja": "再委託先の従業員が偽海外企業のメールを受信したことを端緒にMicrosoft 365が不正アクセスされました。 関係者・出演者のメールと添付資料が潜在的対象です。確認した公表本文に人数はなく、提供一覧の156人は未確認です。", "en": "A phishing message impersonating an overseas firm preceded unauthorized Microsoft 365 access at a subcontractor. Potential scope includes stakeholder and performer mail and attachments. The reviewed notice gives no person count; the supplied 156-person figure remains unverified." }, "disclosedAt": "2026-08-20", "sourceUrls": [ "https://www.expo2025.or.jp/news/news-20260820-01/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "再委託先の従業員が偽海外企業のメールを受信したことを端緒にMicrosoft 365が不正アクセスされました。", "en": "A phishing message impersonating an overseas firm preceded unauthorized Microsoft 365 access at a subcontractor." }, "locator": "§§1,2,4", "sourceUrls": [ "https://www.expo2025.or.jp/news/news-20260820-01/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "関係者・出演者のメールと添付資料が潜在的対象です。確認した公表本文に人数はなく、提供一覧の156人は未確認です。", "en": "Potential scope includes stakeholder and performer mail and attachments. The reviewed notice gives no person count; the supplied 156-person figure remains unverified." }, "locator": "§§1,2,4", "sourceUrls": [ "https://www.expo2025.or.jp/news/news-20260820-01/" ] } ] }, "gaps": [ { "ja": "提供一覧の件数は、確認した一次資料では検証できていません。", "en": "The supplied count was not verified by the reviewed primary notice." } ], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.expo2025.or.jp/news/news-20260820-01/" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-090", "organization": "さくらインターネット", "supplied": { "date": "2026-08-19", "dateMeaning": "unverified", "count": { "text": "136万563件", "value": 1360563, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "sakura-billing-2026" ], "verified": { "summary": { "ja": "1,360,563アカウントの可能性。30件の会員パスワード加工値と初期サーバーパスワードは別です。", "en": "Reviewed against the cited primary notice; see linked catalog claims for confirmed scope and corrections." }, "disclosedAt": "2026-08-19", "sourceUrls": [ "https://www.sakura.ad.jp/corporate/information/newsreleases/2026/09/10/1968225692/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "請求情報DBへの不正アクセスが確認されましたが、ホスティング事案との関連は確認されていません。", "en": "Billing-database unauthorized access was confirmed without an established link to the hosting incident." }, "locator": "4.(2) 販売管理システム / 4.(3) 認証情報", "sourceUrls": [ "https://www.sakura.ad.jp/corporate/information/newsreleases/2026/09/10/1968225692/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "流出の可能性がある対象は136万563件です。一部には初期パスワードが含まれますが、現行パスワード全体の流出を意味しません。", "en": "Potential exposure covers 1,360,563 accounts and some initial passwords, not all current passwords." }, "locator": "5. 影響を受けた可能性のある情報", "sourceUrls": [ "https://www.sakura.ad.jp/corporate/information/newsreleases/2026/09/10/1968225692/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-07.shtm" ], "attemptedSourceUrls": [ "https://www.sakura.ad.jp/corporate/information/newsreleases/2026/08/17/1968225614/", "https://www.sakura.ad.jp/corporate/information/newsreleases/2026/08/19/1968225633/", "https://www.sakura.ad.jp/corporate/information/newsreleases/2026/09/10/1968225692/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-091", "organization": "ジェックス", "supplied": { "date": "2026-08-19", "dateMeaning": "unverified", "count": { "text": "7万8,979件", "value": 78979, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "gex-ransomware-2026" ], "verified": { "summary": { "ja": "ランサムウェアにより社内サーバーのファイルが暗号化されました。侵入経路は未公表です。 個人情報77,619件と氏名のみ1,360件が流出した可能性があります。外部流出は確認できていません。", "en": "Ransomware encrypted company server files; the entry route is undisclosed. 77,619 personal-information records and 1,360 name-only records may have been exposed; exfiltration has not been confirmed." }, "disclosedAt": "2026-02-06", "sourceUrls": [ "https://www.gex-fp.co.jp/news/20260819/", "https://www.gex-fp.co.jp/cms/wp-content/uploads/2026/02/260206_security-failure_v1.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "ランサムウェアにより社内サーバーのファイルが暗号化されました。侵入経路は未公表です。", "en": "Ransomware encrypted company server files; the entry route is undisclosed." }, "locator": "8月19日報告 §§1-5", "sourceUrls": [ "https://www.gex-fp.co.jp/news/20260819/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "個人情報77,619件と氏名のみ1,360件が流出した可能性があります。外部流出は確認できていません。", "en": "77,619 personal-information records and 1,360 name-only records may have been exposed; exfiltration has not been confirmed." }, "locator": "8月19日報告 §§1-5", "sourceUrls": [ "https://www.gex-fp.co.jp/news/20260819/" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.gex-fp.co.jp/cms/wp-content/uploads/2026/02/260206_security-failure_v1.pdf", "https://www.gex-fp.co.jp/cms/wp-content/uploads/2026/02/260209_security-failure_v2.pdf", "https://www.gex-fp.co.jp/news/20260819/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-092", "organization": "静岡県", "supplied": { "date": "2026-08-19", "dateMeaning": "unverified", "count": { "text": "109人", "value": 109, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "shizuoka-form-exposure-2026" ], "verified": { "summary": { "ja": "Googleフォームの「結果の概要を表示する」設定が有効で、他の申込者の回答を表示していました。 防災リーダー研修の109人の氏名・電話等が対象です。", "en": "A Google Forms response-summary setting exposed other applicants’ answers. Names, phone numbers and related data for 109 disaster-preparedness trainees were exposed." }, "disclosedAt": "2026-08-19", "sourceUrls": [ "https://www.pref.shizuoka.jp/_res/projects/default_project/_page_/001/085/031/02_0819boujou.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "Googleフォームの「結果の概要を表示する」設定が有効で、他の申込者の回答を表示していました。", "en": "A Google Forms response-summary setting exposed other applicants’ answers." }, "locator": "p.1 §§1-4", "sourceUrls": [ "https://www.pref.shizuoka.jp/_res/projects/default_project/_page_/001/085/031/02_0819boujou.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "防災リーダー研修の109人の氏名・電話等が対象です。", "en": "Names, phone numbers and related data for 109 disaster-preparedness trainees were exposed." }, "locator": "p.1 §§1-4", "sourceUrls": [ "https://www.pref.shizuoka.jp/_res/projects/default_project/_page_/001/085/031/02_0819boujou.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-07.shtm" ], "attemptedSourceUrls": [ "https://www.city.makinohara.shizuoka.jp/soshiki/31/61903.html", "https://www.pref.shizuoka.jp/_res/projects/default_project/_page_/001/085/031/02_0819boujou.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-093", "organization": "ウェブライフ", "supplied": { "date": "2026-08-18", "dateMeaning": "unverified", "count": { "text": "7,425人", "value": 7425, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "weblife-oem-2026" ], "verified": { "summary": { "ja": "OEM顧客管理のアクセス制御に不備があり、8月14〜17日に不正アクセスを受けました。 最大7,425人が対象です。8月28日更新ではメール以外の氏名・住所・電話等の流出の可能性を否定しています。", "en": "A customer-management access-control defect enabled unauthorized activity from August 14 to 17. Up to 7,425 people were affected; the August 28 update ruled out exposure of names, addresses, phone numbers and other fields, while email exposure remains possible." }, "disclosedAt": "2026-08-18", "sourceUrls": [ "https://web-life.co.jp/news/6551/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "OEM顧客管理のアクセス制御に不備があり、8月14〜17日に不正アクセスを受けました。", "en": "A customer-management access-control defect enabled unauthorized activity from August 14 to 17." }, "locator": "初報 §§1-4 / 続報 §§2-4", "sourceUrls": [ "https://web-life.co.jp/news/6551/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大7,425人が対象です。8月28日更新ではメール以外の氏名・住所・電話等の流出の可能性を否定しています。", "en": "Up to 7,425 people were affected; the August 28 update ruled out exposure of names, addresses, phone numbers and other fields, while email exposure remains possible." }, "locator": "初報 §§1-4 / 続報 §§2-4", "sourceUrls": [ "https://web-life.co.jp/news/6551/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-08.shtm" ], "attemptedSourceUrls": [ "https://web-life.co.jp/news/6551/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-094", "organization": "ロジックベイン", "supplied": { "date": "2026-08-17", "dateMeaning": "unverified", "count": { "text": "約9.7万人", "value": 97000, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "logicvein-2025" ], "verified": { "summary": { "ja": "VPN経由の社内侵入後にランサムウェアを実行したと調査機関が推測しています。 約97,338人が潜在的対象で、うち17,559人の情報のリークサイト掲載を確認しています。", "en": "Investigators infer that intrusion through VPN preceded ransomware execution. Potential scope is about 97,338 people; leak-site publication is confirmed for 17,559." }, "disclosedAt": "2025-12-08", "sourceUrls": [ "https://www.lvi.co.jp/company-news/2026/08/17/post-2244/" ], "claims": [ { "topic": "entry", "status": "inferred", "text": { "ja": "VPN経由の社内侵入後にランサムウェアを実行したと調査機関が推測しています。", "en": "Investigators infer that intrusion through VPN preceded ransomware execution." }, "locator": "第4報 §§1-3,6", "sourceUrls": [ "https://www.lvi.co.jp/company-news/2026/08/17/post-2244/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "約97,338人が潜在的対象で、うち17,559人の情報のリークサイト掲載を確認しています。", "en": "Potential scope is about 97,338 people; leak-site publication is confirmed for 17,559." }, "locator": "第4報 §§1-3,6", "sourceUrls": [ "https://www.lvi.co.jp/company-news/2026/08/17/post-2244/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-08.shtm" ], "attemptedSourceUrls": [ "https://www.lvi.co.jp/company-news/2026/01/30/%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E7%9F%A5%E3%82%89%E3%81%9B-%E7%AC%AC2%E5%A0%B1-20260130/", "https://www.lvi.co.jp/company-news/2026/02/27/%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E7%9F%A5%E3%82%89%E3%81%9B-%E7%AC%AC3%E5%A0%B1%E3%83%BB%E6%9C%80%E7%B5%82%E5%A0%B1%E5%91%8A-202602/", "https://www.lvi.co.jp/company-news/2026/08/17/post-2244/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-095", "organization": "教育ソフトウェア", "supplied": { "date": "2026-08-17", "dateMeaning": "unverified", "count": { "text": "4,627件", "value": 4627, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "education-software-dormant-2026" ], "verified": { "summary": { "ja": "2016年までのサービスに使った休眠サーバーが侵入・暗号化被害を受けました。 旧サービスの利用者情報4,627件が潜在的対象で、調査では流出は未確認です。", "en": "A dormant rental server used for a service ending in 2016 was accessed and encrypted. 4,627 old-service records may have been exposed; investigation did not confirm leakage." }, "disclosedAt": "2026-08-17", "sourceUrls": [ "https://www.kyoikusw.co.jp/news/20260817/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "2016年までのサービスに使った休眠サーバーが侵入・暗号化被害を受けました。", "en": "A dormant rental server used for a service ending in 2016 was accessed and encrypted." }, "locator": "本件の概要 / 現在の状況", "sourceUrls": [ "https://www.kyoikusw.co.jp/news/20260817/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "旧サービスの利用者情報4,627件が潜在的対象で、調査では流出は未確認です。", "en": "4,627 old-service records may have been exposed; investigation did not confirm leakage." }, "locator": "本件の概要 / 現在の状況", "sourceUrls": [ "https://www.kyoikusw.co.jp/news/20260817/" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.kyoikusw.co.jp/news/20260817/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-096", "organization": "KBC学園", "supplied": { "date": "2026-08-17", "dateMeaning": "unverified", "count": { "text": "2,471人", "value": 2471, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "発送データの行削除ミスで宛名と住所がずれ、2,471人の氏名を誤送付した事案です。外部侵入の記録には加えません。", "en": "A mailing-list editing error disclosed 2,471 people’s information. The manual data-processing error is not treated as intrusion." }, "disclosedAt": "2026-08-17", "sourceUrls": [ "https://kbcgroup.ac.jp/21134" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 2471, \"unit\": \"people\", \"scope\": \"misaddressed direct-mail recipients\"}]", "en": "Primary-source breakdown: [{\"value\": 2471, \"unit\": \"people\", \"scope\": \"misaddressed direct-mail recipients\"}]" }, "sourceUrls": [ "https://kbcgroup.ac.jp/21134" ], "locator": "§§1-5" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-08.shtm" ], "attemptedSourceUrls": [ "https://kbcgroup.ac.jp/21134" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-097", "organization": "東京ガスネットワーク", "supplied": { "date": "2026-08-13", "dateMeaning": "unverified", "count": { "text": "約2万件", "value": 20000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "飲酒後の帰宅中に業務PCを含む鞄を紛失した事案です。約2万件の工事情報と152件の相談情報を保存していました。不正操作の痕跡は未確認で、端末の物理紛失として分けます。", "en": "A lost bag contained a PC with construction and inquiry information. The separate record scopes are not added as people; physical loss is excluded from intrusion counts." }, "disclosedAt": "2026-08-13", "sourceUrls": [ "https://www.tokyo-gas.co.jp/network/news/press/20260813-01.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 20000, \"unit\": \"records\", \"qualifiers\": [\"approximate\"], \"scope\": \"construction customers\"}, {\"value\": 152, \"unit\": \"records\", \"scope\": \"supply inquiries\"}]", "en": "Primary-source breakdown: [{\"value\": 20000, \"unit\": \"records\", \"qualifiers\": [\"approximate\"], \"scope\": \"construction customers\"}, {\"value\": 152, \"unit\": \"records\", \"scope\": \"supply inquiries\"}]" }, "sourceUrls": [ "https://www.tokyo-gas.co.jp/network/news/press/20260813-01.html" ], "locator": "§§1-2" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-08.shtm" ], "attemptedSourceUrls": [ "https://www.tokyo-gas.co.jp/network/news/press/20260813-01.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-098", "organization": "那覇市教育委員会", "supplied": { "date": "2026-08-13", "dateMeaning": "unverified", "count": { "text": "約500人", "value": 500, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "那覇市教育委員会の約500人について、該当事故の一次資料を確認できませんでした。サポート詐欺との二次情報だけでは端末侵害や人数を確定しません。", "en": "No first-party Naha education-board incident notice establishing approximately 500 people was verified. Secondary support-scam reporting is not sufficient." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "那覇市教育委員会の約500人について、該当事故の一次資料を確認できませんでした。サポート詐欺との二次情報だけでは端末侵害や人数を確定しません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-08.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-099", "organization": "徳島県", "supplied": { "date": "2026-08-10", "dateMeaning": "unverified", "count": { "text": "延べ約46万件", "value": 460000, "unit": "件", "qualifiers": [ "延べ", "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "返却したバックアップHDD2台をデータ消去前に誤廃棄した可能性が高い事案です。住基ネット操作ログは延べ約46万件、うち個人番号を含むもの約18万件です。物理的な媒体管理として分けます。", "en": "Two uncleared hard drives may have been improperly disposed of. Cumulative record and identifier scopes are not summed; physical disposal is excluded from remote intrusion." }, "disclosedAt": "2026-08-10", "sourceUrls": [ "https://www.pref.tokushima.lg.jp/kenseijoho/hodoteikyoshiryo/7315616/" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 460000, \"unit\": \"records\", \"qualifiers\": [\"approximate\", \"cumulative\"], \"scope\": \"resident-system access logs\"}, {\"value\": 180000, \"unit\": \"records\", \"qualifiers\": [\"approximate\", \"cumulative\"], \"scope\": \"subset containing personal identification numbers\"}]", "en": "Primary-source breakdown: [{\"value\": 460000, \"unit\": \"records\", \"qualifiers\": [\"approximate\", \"cumulative\"], \"scope\": \"resident-system access logs\"}, {\"value\": 180000, \"unit\": \"records\", \"qualifiers\": [\"approximate\", \"cumulative\"], \"scope\": \"subset containing personal identification numbers\"}]" }, "sourceUrls": [ "https://www.pref.tokushima.lg.jp/kenseijoho/hodoteikyoshiryo/7315616/" ], "locator": "§§1-4" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-08.shtm" ], "attemptedSourceUrls": [ "https://www.pref.tokushima.lg.jp/kenseijoho/hodoteikyoshiryo/7315616/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-100", "organization": "早島町", "supplied": { "date": "2026-08-10", "dateMeaning": "unverified", "count": { "text": "最大196人", "value": 196, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "早島町の最大196人に対応する原資料の本文を取得できませんでした。現在のページや検索結果の見出しだけではフォーム設定と影響を確認できません。", "en": "The original Hayashima notice body was unavailable. Current index pages and search headings do not establish the form configuration or up-to-196-person scope." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "早島町の最大196人に対応する原資料の本文を取得できませんでした。現在のページや検索結果の見出しだけではフォーム設定と影響を確認できません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-08.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-101", "organization": "デジタル庁", "supplied": { "date": "2026-08-07", "dateMeaning": "unverified", "count": { "text": "150人", "value": 150, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "曖昧な手順書による抽出ミスで、別団体職員150人のログイン履歴を他省庁へ送付しました。送付先が削除済みで転送は未確認です。9月のGSS不正アクセスとは別事案として分けます。", "en": "The agency reports a mistaken extraction and sharing of 150 log records involving another agency. This is separate from the GSS intrusion." }, "disclosedAt": "2026-08-07", "sourceUrls": [ "https://www.digital.go.jp/news/6d720c40-a064-4e48-a698-c8123ba53299" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 150, \"unit\": \"people\", \"scope\": \"qualification-management personnel\"}]", "en": "Primary-source breakdown: [{\"value\": 150, \"unit\": \"people\", \"scope\": \"qualification-management personnel\"}]" }, "sourceUrls": [ "https://www.digital.go.jp/news/6d720c40-a064-4e48-a698-c8123ba53299" ], "locator": "§§1-4" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://www.digital.go.jp/news/6d720c40-a064-4e48-a698-c8123ba53299" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-102", "organization": "科学技術振興機構", "supplied": { "date": "2026-08-07", "dateMeaning": "unverified", "count": { "text": "約1万6,000件", "value": 16000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "jst-mail-2026" ], "verified": { "summary": { "ja": "役職員12人のメールボックスへの不正アクセスを確認しました。具体的な経路は未公表です。 8月28日の精査でメール約18,000件に更新しました。外部アドレス約1,400件等は内訳で、16,000件の旧数字を置き換えます。", "en": "Unauthorized access affected 12 staff mailboxes; the entry route is undisclosed. The August 28 review revised affected mail to about 18,000 records; about 1,400 external addresses are a subset, replacing the supplied 16,000 figure." }, "disclosedAt": "2026-08-07", "sourceUrls": [ "https://www.jst.go.jp/osirase/2026/20260807-2.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "役職員12人のメールボックスへの不正アクセスを確認しました。具体的な経路は未公表です。", "en": "Unauthorized access affected 12 staff mailboxes; the entry route is undisclosed." }, "locator": "§§1-3", "sourceUrls": [ "https://www.jst.go.jp/osirase/2026/20260807-2.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "8月28日の精査でメール約18,000件に更新しました。外部アドレス約1,400件等は内訳で、16,000件の旧数字を置き換えます。", "en": "The August 28 review revised affected mail to about 18,000 records; about 1,400 external addresses are a subset, replacing the supplied 16,000 figure." }, "locator": "§§1-3", "sourceUrls": [ "https://www.jst.go.jp/osirase/2026/20260807-2.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-08.shtm" ], "attemptedSourceUrls": [ "https://www.jst.go.jp/osirase/2026/20260807-2.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-103", "organization": "尼崎市立立花南小学校", "supplied": { "date": "2026-08-07", "dateMeaning": "unverified", "count": { "text": "107人", "value": 107, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "整理作業で卒業生107人の紙の指導要録を誤って裁断した事案です。外部への情報漏えいのおそれはないと発表しており、侵入事故には加えません。", "en": "Paper school records were accidentally shredded, covering 107 people. This is physical document loss rather than remote intrusion." }, "disclosedAt": "2026-08-07", "sourceUrls": [ "https://www.city.amagasaki.hyogo.jp/_res/projects/default_project/_page_/001/043/968/260807-01.pdf" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 107, \"unit\": \"people\", \"scope\": \"destroyed school records\"}]", "en": "Primary-source breakdown: [{\"value\": 107, \"unit\": \"people\", \"scope\": \"destroyed school records\"}]" }, "sourceUrls": [ "https://www.city.amagasaki.hyogo.jp/_res/projects/default_project/_page_/001/043/968/260807-01.pdf" ], "locator": "p.1 §§1-4" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://www.city.amagasaki.hyogo.jp/_res/projects/default_project/_page_/001/043/968/260807-01.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-104", "organization": "ナイス", "supplied": { "date": "2026-08-06", "dateMeaning": "unverified", "count": { "text": "約2,400件", "value": 2400, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "nice-mail-2026" ], "verified": { "summary": { "ja": "問い合わせ用メールに不正アクセスがあり、8月21日の追記でスパム送信も確認しました。 約2,400件の氏名・メール・電話等が流出した可能性があります。", "en": "An inquiry mailbox was accessed; the August 21 update confirms spam sent from it. About 2,400 contact records may have leaked." }, "disclosedAt": "2026-08-06", "sourceUrls": [ "https://www.nice.co.jp/release/2026_08_06.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "問い合わせ用メールに不正アクセスがあり、8月21日の追記でスパム送信も確認しました。", "en": "An inquiry mailbox was accessed; the August 21 update confirms spam sent from it." }, "locator": "§§1-4 / 8月21日追記", "sourceUrls": [ "https://www.nice.co.jp/release/2026_08_06.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "約2,400件の氏名・メール・電話等が流出した可能性があります。", "en": "About 2,400 contact records may have leaked." }, "locator": "§§1-4 / 8月21日追記", "sourceUrls": [ "https://www.nice.co.jp/release/2026_08_06.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://www.nice.co.jp/release/2026_08_06.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-105", "organization": "沖縄県", "supplied": { "date": "2026-08-06", "dateMeaning": "unverified", "count": { "text": "200人", "value": 200, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "沖縄県の該当発表URLは404でした。検索結果の抜粋だけで誤送信や200人を確認済みにはしません。", "en": "The corresponding Okinawa notice returned 404. Search-result snippets do not verify the alleged 200-person mis-send." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "沖縄県の該当発表URLは404でした。検索結果の抜粋だけで誤送信や200人を確認済みにはしません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://www.okinawa-nurs.ac.jp/news/20514-2/", "https://www.pref.okinawa.lg.jp/shigoto/nogyo/1010390/1040983.html" ], "retrievalFailures": [ { "url": "https://www.pref.okinawa.lg.jp/shigoto/nogyo/1010390/1040983.html", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-106", "organization": "一正蒲鉾", "supplied": { "date": "2026-08-06", "dateMeaning": "unverified", "count": { "text": "596件", "value": 596, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "ichimasa-mail-2026" ], "verified": { "summary": { "ja": "社員のメールアカウントが不正アクセスされました。具体的な侵入方法は調査中です。 596件は通知した外部メールアドレス数で、漏えいした全件数や人数ではありません。", "en": "An employee mailbox was compromised; the specific entry method is under investigation. 596 is the number of external email addresses notified, not the total leaked-record or victim count." }, "disclosedAt": "2026-08-06", "sourceUrls": [ "https://contents.xj-storage.jp/xcontents/AS00463/e2f21951/695f/4a06/9479/dab1be29f32e/20260806085229423s.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "社員のメールアカウントが不正アクセスされました。具体的な侵入方法は調査中です。", "en": "An employee mailbox was compromised; the specific entry method is under investigation." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://contents.xj-storage.jp/xcontents/AS00463/e2f21951/695f/4a06/9479/dab1be29f32e/20260806085229423s.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "596件は通知した外部メールアドレス数で、漏えいした全件数や人数ではありません。", "en": "596 is the number of external email addresses notified, not the total leaked-record or victim count." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://contents.xj-storage.jp/xcontents/AS00463/e2f21951/695f/4a06/9479/dab1be29f32e/20260806085229423s.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://contents.xj-storage.jp/xcontents/AS00463/e2f21951/695f/4a06/9479/dab1be29f32e/20260806085229423s.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-107", "organization": "M&Sフードサービス", "supplied": { "date": "2026-08-05", "dateMeaning": "unverified", "count": { "text": "最大1,895件", "value": 1895, "unit": "件", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued-partial", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "miyamoto-munashi-orders-2026" ], "verified": { "summary": { "ja": "持ち帰り注文サイトへの不正アクセスを7月29日に確認しました。 最大1,895件の注文データ、1,030人が潜在的対象です。カード決済情報は保有していません。", "en": "Unauthorized access to the takeaway-ordering site was detected on July 29. Potential scope is up to 1,895 order records for 1,030 people; card payment data was not stored." }, "disclosedAt": null, "sourceUrls": [ "https://m-munashi.com/pages/incident202607" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "持ち帰り注文サイトへの不正アクセスを7月29日に確認しました。", "en": "Unauthorized access to the takeaway-ordering site was detected on July 29." }, "locator": "§§1-4", "sourceUrls": [ "https://m-munashi.com/pages/incident202607" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大1,895件の注文データ、1,030人が潜在的対象です。カード決済情報は保有していません。", "en": "Potential scope is up to 1,895 order records for 1,030 people; card payment data was not stored." }, "locator": "§§1-4", "sourceUrls": [ "https://m-munashi.com/pages/incident202607" ] } ] }, "gaps": [ { "ja": "初報日を一次資料で確認できていません。", "en": "The first disclosure date is not established by primary evidence." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://m-munashi.com/pages/incident202607" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-108", "organization": "中部電力", "supplied": { "date": "2026-08-04", "dateMeaning": "unverified", "count": { "text": "約7万4,100人", "value": 74100, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "chubu-business-credentials-2026" ], "verified": { "summary": { "ja": "業務システムの資格情報が不正利用されました。電力供給や顧客情報システムの侵入痕跡は未確認です。 メール約2,400件と、外部関係者約2,400人・グループ関係者約71,700人の連絡先が潜在的対象です。", "en": "Business-system credentials were abused; no intrusion evidence was found for power-supply or customer systems. Potential exposure includes about 2,400 messages and contacts for about 2,400 external and 71,700 group-related people." }, "disclosedAt": "2026-08-04", "sourceUrls": [ "https://www.chuden.co.jp/publicity/press/1218169_3273.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "業務システムの資格情報が不正利用されました。電力供給や顧客情報システムの侵入痕跡は未確認です。", "en": "Business-system credentials were abused; no intrusion evidence was found for power-supply or customer systems." }, "locator": "§§1-3", "sourceUrls": [ "https://www.chuden.co.jp/publicity/press/1218169_3273.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "メール約2,400件と、外部関係者約2,400人・グループ関係者約71,700人の連絡先が潜在的対象です。", "en": "Potential exposure includes about 2,400 messages and contacts for about 2,400 external and 71,700 group-related people." }, "locator": "§§1-3", "sourceUrls": [ "https://www.chuden.co.jp/publicity/press/1218169_3273.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://www.chuden.co.jp/publicity/press/1218169_3273.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-109", "organization": "イノベーション", "supplied": { "date": "2026-08-04", "dateMeaning": "unverified", "count": { "text": "最大約6万件", "value": 60000, "unit": "件", "qualifiers": [ "最大", "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "innovation-github-2026" ], "verified": { "summary": { "ja": "GitHubのアクセストークンを設定ファイルに直接記載していました。第三者が取得し悪用しました。 8月7日確定報で62,691人の漏えいを確認しました。個人情報がリポジトリに保存されていたことも別の原因です。本番DB侵入は未確認です。", "en": "A GitHub access token was embedded in a configuration file, acquired and abused by a third party. The August 7 final notice confirms leakage for 62,691 people; personal data stored in repositories was a separate contributing factor. No production-database intrusion was found." }, "disclosedAt": "2026-08-04", "sourceUrls": [ "https://www.innovation.co.jp/2026/08/github%e3%81%b8%e3%81%ae%e4%b8%8d%e6%ad%a3%e3%82%a2%e3%82%af%e3%82%bb%e3%82%b9%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e8%a9%b3%e7%b4%b0%e8%aa%bf%e6%9f%bb%e3%81%ae%e5%ae%8c%e4%ba%86%e3%81%8a%e3%82%88/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "GitHubのアクセストークンを設定ファイルに直接記載していました。第三者が取得し悪用しました。", "en": "A GitHub access token was embedded in a configuration file, acquired and abused by a third party." }, "locator": "確定報 §§1-4", "sourceUrls": [ "https://www.innovation.co.jp/2026/08/github%e3%81%b8%e3%81%ae%e4%b8%8d%e6%ad%a3%e3%82%a2%e3%82%af%e3%82%bb%e3%82%b9%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e8%a9%b3%e7%b4%b0%e8%aa%bf%e6%9f%bb%e3%81%ae%e5%ae%8c%e4%ba%86%e3%81%8a%e3%82%88/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "8月7日確定報で62,691人の漏えいを確認しました。個人情報がリポジトリに保存されていたことも別の原因です。本番DB侵入は未確認です。", "en": "The August 7 final notice confirms leakage for 62,691 people; personal data stored in repositories was a separate contributing factor. No production-database intrusion was found." }, "locator": "確定報 §§1-4", "sourceUrls": [ "https://www.innovation.co.jp/2026/08/github%e3%81%b8%e3%81%ae%e4%b8%8d%e6%ad%a3%e3%82%a2%e3%82%af%e3%82%bb%e3%82%b9%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e8%a9%b3%e7%b4%b0%e8%aa%bf%e6%9f%bb%e3%81%ae%e5%ae%8c%e4%ba%86%e3%81%8a%e3%82%88/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://www.innovation.co.jp/2026/08/%E3%80%8Egithub%E3%80%8F%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E7%99%BA%E7%94%9F%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E7%9F%A5%E3%82%89%E3%81%9B%E3%81%A8/", "https://www.innovation.co.jp/2026/08/github%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E7%9F%A5%E3%82%89%E3%81%9B%EF%BC%88%E7%A2%BA%E5%AE%9A%E5%A0%B1%EF%BC%89/", "https://www.innovation.co.jp/2026/08/github%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E8%A9%B3%E7%B4%B0%E8%AA%BF%E6%9F%BB%E3%81%AE%E5%AE%8C%E4%BA%86%E3%81%8A%E3%82%88/", "https://www.innovation.co.jp/2026/08/github%e3%81%b8%e3%81%ae%e4%b8%8d%e6%ad%a3%e3%82%a2%e3%82%af%e3%82%bb%e3%82%b9%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e8%a9%b3%e7%b4%b0%e8%aa%bf%e6%9f%bb%e3%81%ae%e5%ae%8c%e4%ba%86%e3%81%8a%e3%82%88/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-110", "organization": "京都府 KYO育tv", "supplied": { "date": "2026-08-04", "dateMeaning": "unverified", "count": { "text": "最大1,338人", "value": 1338, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "kyoto-kyotv-exposure-2026" ], "verified": { "summary": { "ja": "お気に入り機能のシステム不備で、会員情報がインターネット上で閲覧可能でした。 最大1,338人が対象で、86人の検索結果への表示を実際に確認しました。", "en": "A favorites-feature defect exposed member data on the internet. Potential scope is up to 1,338 members; search results actually showed data for 86." }, "disclosedAt": "2026-08-04", "sourceUrls": [ "https://www.pref.kyoto.jp/press/documents/26080407.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "お気に入り機能のシステム不備で、会員情報がインターネット上で閲覧可能でした。", "en": "A favorites-feature defect exposed member data on the internet." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://www.pref.kyoto.jp/press/documents/26080407.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大1,338人が対象で、86人の検索結果への表示を実際に確認しました。", "en": "Potential scope is up to 1,338 members; search results actually showed data for 86." }, "locator": "p.1 §§1-3", "sourceUrls": [ "https://www.pref.kyoto.jp/press/documents/26080407.pdf" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.pref.kyoto.jp/press/documents/26080407.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-111", "organization": "講談社", "supplied": { "date": "2026-08-03", "dateMeaning": "unverified", "count": { "text": "最大3,812件", "value": 3812, "unit": "件", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "kodansha-phishing-2026" ], "verified": { "summary": { "ja": "取引先を偽装したフィッシング先で社員が認証情報を入力し、メールへ不正ログインされました。 連絡先最大3,812件が盗まれ、うち553メールアドレスへなりすましメールを送信されました。", "en": "An employee entered credentials on a phishing site impersonating a business partner, enabling unauthorized mailbox login. Up to 3,812 contacts were stolen and 553 addresses received impersonation messages." }, "disclosedAt": "2026-08-03", "sourceUrls": [ "https://www.kodansha.co.jp/notices/723" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "取引先を偽装したフィッシング先で社員が認証情報を入力し、メールへ不正ログインされました。", "en": "An employee entered credentials on a phishing site impersonating a business partner, enabling unauthorized mailbox login." }, "locator": "pp.1-2 本件の経緯 / 弊社の対応", "sourceUrls": [ "https://www.kodansha.co.jp/notices/723" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "連絡先最大3,812件が盗まれ、うち553メールアドレスへなりすましメールを送信されました。", "en": "Up to 3,812 contacts were stolen and 553 addresses received impersonation messages." }, "locator": "pp.1-2 本件の経緯 / 弊社の対応", "sourceUrls": [ "https://www.kodansha.co.jp/notices/723" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://kodansha-beck.co.jp/news/unauthorizedaccess20261002", "https://www.kodansha.co.jp/notices/723" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-112", "organization": "福岡県筑後農林事務所", "supplied": { "date": "2026-08-03", "dateMeaning": "unverified", "count": { "text": "300人", "value": 300, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "管轄外300人の情報を削除し忘れた添付ファイルを11機関へメールで送付しました。全送付先で削除を確認しており、送付業務のミスとして分けます。", "en": "The wrong attachment was sent to 11 institutions, affecting 300 people. This manual email mistake is outside intrusion counts." }, "disclosedAt": "2026-08-03", "sourceUrls": [ "https://www.pref.fukuoka.lg.jp/press-release/mail260803.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 300, \"unit\": \"people\", \"scope\": \"out-of-jurisdiction subsidy applicants\"}]", "en": "Primary-source breakdown: [{\"value\": 300, \"unit\": \"people\", \"scope\": \"out-of-jurisdiction subsidy applicants\"}]" }, "sourceUrls": [ "https://www.pref.fukuoka.lg.jp/press-release/mail260803.html" ], "locator": "§§1-4" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://www.pref.fukuoka.lg.jp/press-release/mail260803.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-113", "organization": "ショップサーブ", "supplied": { "date": "2026-08-01", "dateMeaning": "unverified", "count": { "text": "885万3,839件", "value": 8853839, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "estore-shopserve-2026" ], "verified": { "summary": { "ja": "サーバー上の不正プログラムで購入者情報を外部送信されました。侵入の詳細は調査中です。 8,853,839件の登録データです。同一人の複数登録を含む可能性があり、人数ではありません。店舗の認証情報も対象です。", "en": "A malicious server program transmitted buyer data externally; the entry mechanism remains under investigation. 8,853,839 registered records may include multiple entries per person; merchant credentials were also affected." }, "disclosedAt": "2026-08-01", "sourceUrls": [ "https://estore.jp/press/20260802/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "サーバー上の不正プログラムで購入者情報を外部送信されました。侵入の詳細は調査中です。", "en": "A malicious server program transmitted buyer data externally; the entry mechanism remains under investigation." }, "locator": "第2報 §§1-4 / 対象件数", "sourceUrls": [ "https://estore.jp/press/20260802/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "8,853,839件の登録データです。同一人の複数登録を含む可能性があり、人数ではありません。店舗の認証情報も対象です。", "en": "8,853,839 registered records may include multiple entries per person; merchant credentials were also affected." }, "locator": "第2報 §§1-4 / 対象件数", "sourceUrls": [ "https://estore.jp/press/20260802/" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://estore.jp/press/20260801/", "https://estore.jp/press/20260802/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-114", "organization": "EPARKリラク＆エステ", "supplied": { "date": "2026-07-31", "dateMeaning": "unverified", "count": { "text": "約3,300万件", "value": 33000000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "epark-peakmanager-2026" ], "verified": { "summary": { "ja": "顧客DBの外部転送と、その後の削除を専門調査で確認しました。侵入手法は非公表です。 9月24日更新で約3,300万件から名寄せ後約2,218万レコードへ修正しました。正確な人数への換算はできません。", "en": "Forensics confirmed database exfiltration followed by deletion; the entry method is withheld. The September 24 update revised about 33 million records to about 22.18 million after matching; an exact person count cannot be determined." }, "disclosedAt": "2026-07-31", "sourceUrls": [ "https://www.epark-relax.co.jp/news/231" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "顧客DBの外部転送と、その後の削除を専門調査で確認しました。侵入手法は非公表です。", "en": "Forensics confirmed database exfiltration followed by deletion; the entry method is withheld." }, "locator": "第2報 §§1-4", "sourceUrls": [ "https://www.epark-relax.co.jp/news/231" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "9月24日更新で約3,300万件から名寄せ後約2,218万レコードへ修正しました。正確な人数への換算はできません。", "en": "The September 24 update revised about 33 million records to about 22.18 million after matching; an exact person count cannot be determined." }, "locator": "第2報 §§1-4", "sourceUrls": [ "https://www.epark-relax.co.jp/news/231" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://www.epark-relax.co.jp/news/225", "https://www.epark-relax.co.jp/news/231" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-115", "organization": "国立健康危機管理研究機構", "supplied": { "date": "2026-07-31", "dateMeaning": "unverified", "count": { "text": "8万3,007人", "value": 83007, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "国立健康危機管理研究機構の83,007人に対応する一次資料を確認できませんでした。取得できた他の日付・別事案をこの候補へ転用しません。", "en": "The corresponding JIHS first-party notice for 83,007 people was not located. Different notices and earlier events are not substituted." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "国立健康危機管理研究機構の83,007人に対応する一次資料を確認できませんでした。取得できた他の日付・別事案をこの候補へ転用しません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-116", "organization": "テレビ朝日メディアプレックス", "supplied": { "date": "2026-07-30", "dateMeaning": "unverified", "count": { "text": "4,543件", "value": 4543, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "mediaplex-2026" ], "verified": { "summary": { "ja": "認証連携アカウントの認証情報を盗まれ悪用された可能性があると、専門調査で報告されています。 従業員1,343件、採用応募者2,786件、取引先414件が漏えいまたは潜在的対象です。", "en": "Investigators report possible theft and abuse of authentication-federation account credentials. 1,343 employee, 2,786 applicant and 414 contact records leaked or may have leaked." }, "disclosedAt": "2026-07-03", "sourceUrls": [ "https://www.mediaplex.co.jp/wp-content/uploads/20260730.pdf" ], "claims": [ { "topic": "entry", "status": "inferred", "text": { "ja": "認証連携アカウントの認証情報を盗まれ悪用された可能性があると、専門調査で報告されています。", "en": "Investigators report possible theft and abuse of authentication-federation account credentials." }, "locator": "第2報 pp.1-3 §§1-5", "sourceUrls": [ "https://www.mediaplex.co.jp/wp-content/uploads/20260730.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "従業員1,343件、採用応募者2,786件、取引先414件が漏えいまたは潜在的対象です。", "en": "1,343 employee, 2,786 applicant and 414 contact records leaked or may have leaked." }, "locator": "第2報 pp.1-3 §§1-5", "sourceUrls": [ "https://www.mediaplex.co.jp/wp-content/uploads/20260730.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-10.shtm" ], "attemptedSourceUrls": [ "https://www.mediaplex.co.jp/wp-content/uploads/20260703.pdf", "https://www.mediaplex.co.jp/wp-content/uploads/20260730.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-117", "organization": "新札幌豊和会病院", "supplied": { "date": "2026-07-30", "dateMeaning": "unverified", "count": { "text": "4,721人", "value": 4721, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "新札幌豊和会病院の原資料URLは404で、現在の一覧にも対応本文がありません。4,721人は未検証です。", "en": "The hospital notice returned 404 and no corresponding body was available in its current index. The supplied 4,721-person count remains unverified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "新札幌豊和会病院の原資料URLは404で、現在の一覧にも対応本文がありません。4,721人は未検証です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-09.shtm" ], "attemptedSourceUrls": [ "https://www.houwa.or.jp/information/info-20260730/" ], "retrievalFailures": [ { "url": "https://www.houwa.or.jp/information/info-20260730/", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-118", "organization": "生命保険協会", "supplied": { "date": "2026-07-29", "dateMeaning": "unverified", "count": { "text": "約3万7,000件", "value": 37000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "seiho-contract-lookup-2026" ], "verified": { "summary": { "ja": "外部から特定の操作をすると契約照会システムの登録者情報が閲覧可能でした。 利用者ベースで約37,000件の潜在的対象です。不正取得や利用は未確認です。", "en": "Specific external operations could expose registered-user data in a contract-lookup system. Potential scope is about 37,000 user records; unauthorized acquisition or use was not confirmed." }, "disclosedAt": "2026-07-29", "sourceUrls": [ "https://www.seiho.or.jp/info/news/shared/mt-item/20260729.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "外部から特定の操作をすると契約照会システムの登録者情報が閲覧可能でした。", "en": "Specific external operations could expose registered-user data in a contract-lookup system." }, "locator": "pp.1-2 §§1-3", "sourceUrls": [ "https://www.seiho.or.jp/info/news/shared/mt-item/20260729.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "利用者ベースで約37,000件の潜在的対象です。不正取得や利用は未確認です。", "en": "Potential scope is about 37,000 user records; unauthorized acquisition or use was not confirmed." }, "locator": "pp.1-2 §§1-3", "sourceUrls": [ "https://www.seiho.or.jp/info/news/shared/mt-item/20260729.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-10.shtm" ], "attemptedSourceUrls": [ "https://www.seiho.or.jp/info/news/shared/mt-item/20260729.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-119", "organization": "インク革命", "supplied": { "date": "2026-07-29", "dateMeaning": "unverified", "count": { "text": "2万4,166件", "value": 24166, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "inkrevolution-payment-2025" ], "verified": { "summary": { "ja": "システムの脆弱性を悪用して決済アプリケーションを改ざんされました。具体的な製品・CVEは未公表です。 顧客24,166人の個人情報とカード情報が流出した可能性があります。両区分を合算しません。", "en": "A system vulnerability was exploited to alter the payment application; product and CVE are undisclosed. Personal and card data for 24,166 customers may have been disclosed; the two categories are not additive." }, "disclosedAt": "2025-12-18", "sourceUrls": [ "https://ink-revolution.com/pages/info-2026-07-15", "https://ink-revolution.com/pages/info-2025-12-18" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "システムの脆弱性を悪用して決済アプリケーションを改ざんされました。具体的な製品・CVEは未公表です。", "en": "A system vulnerability was exploited to alter the payment application; product and CVE are undisclosed." }, "locator": "§§1-2,5", "sourceUrls": [ "https://ink-revolution.com/pages/info-2026-07-15" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "顧客24,166人の個人情報とカード情報が流出した可能性があります。両区分を合算しません。", "en": "Personal and card data for 24,166 customers may have been disclosed; the two categories are not additive." }, "locator": "§§1-2,5", "sourceUrls": [ "https://ink-revolution.com/pages/info-2026-07-15" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://ink-revolution.com/pages/info-2026-07-15" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-120", "organization": "タカラトミー", "supplied": { "date": "2026-07-28", "dateMeaning": "unverified", "count": { "text": "約15万5,000件", "value": 155000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "takaratomy-dmp-auth-2026" ], "verified": { "summary": { "ja": "アプリ公開時からユーザー認証の設計・実装に脆弱性がありました。 登録者数による最大約155,000人が潜在的対象です。第三者の閲覧や不正利用は未確認です。", "en": "The app had a user-authentication design and implementation defect from release. Potential scope is up to approximately 155,000 registered users; third-party access or misuse was not confirmed." }, "disclosedAt": "2026-07-28", "sourceUrls": [ "https://www.takaratomy.co.jp/support/pdf/dmp20260728.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "アプリ公開時からユーザー認証の設計・実装に脆弱性がありました。", "en": "The app had a user-authentication design and implementation defect from release." }, "locator": "pp.1-2 本文 / §§1-2", "sourceUrls": [ "https://www.takaratomy.co.jp/support/pdf/dmp20260728.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "登録者数による最大約155,000人が潜在的対象です。第三者の閲覧や不正利用は未確認です。", "en": "Potential scope is up to approximately 155,000 registered users; third-party access or misuse was not confirmed." }, "locator": "pp.1-2 本文 / §§1-2", "sourceUrls": [ "https://www.takaratomy.co.jp/support/pdf/dmp20260728.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-10.shtm" ], "attemptedSourceUrls": [ "https://www.takaratomy.co.jp/support/pdf/dmp20260728.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-121", "organization": "穴水町", "supplied": { "date": "2026-07-27", "dateMeaning": "unverified", "count": { "text": "3,553人", "value": 3553, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "健診対象者の情報を保存したUSBを庁舎内で紛失した事案です。本文に人数はなく、提供一覧の3,553人は未確認です。物理的な媒体管理として分けます。", "en": "The town reports a missing USB device. The reviewed notice did not establish the supplied 3,553-person figure; physical loss is excluded from intrusion counts." }, "disclosedAt": "2026-07-27", "sourceUrls": [ "https://www.town.anamizu.lg.jp/page/108229.html" ], "claims": [] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-10.shtm" ], "attemptedSourceUrls": [ "https://www.town.anamizu.lg.jp/page/108229.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-122", "organization": "JR東海高島屋", "supplied": { "date": "2026-07-24", "dateMeaning": "unverified", "count": { "text": "7,582人", "value": 7582, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "JR東海高島屋の7,582人に対応する一次発表の本文を特定できませんでした。", "en": "No corresponding first-party JR Tokai Takashimaya notice establishing 7,582 people was located." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "JR東海高島屋の7,582人に対応する一次発表の本文を特定できませんでした。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-123", "organization": "旭化成セラピューティクス・シミックHCI", "supplied": { "date": "2026-07-24", "dateMeaning": "unverified", "count": { "text": "1,940人", "value": 1940, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "cmic-ra-connect-2026" ], "verified": { "summary": { "ja": "患者支援サービスのWeb公開領域に置いたファイルを第三者に取得されました。 患者30人とメールのみ216人、医療従事者1,535人、委託元関係者113人と46人が対象です。合計1,940人と報告しています。", "en": "Files in the publicly served area of a patient-support service were retrieved by a third party. The disclosed groups are 30 patients, 216 email-only patient records, 1,535 medical professionals and two client-staff groups of 113 and 46, totaling 1,940." }, "disclosedAt": "2026-07-24", "sourceUrls": [ "https://www.cmic-hci.com/news/20260724" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "患者支援サービスのWeb公開領域に置いたファイルを第三者に取得されました。", "en": "Files in the publicly served area of a patient-support service were retrieved by a third party." }, "locator": "§§1-4", "sourceUrls": [ "https://www.cmic-hci.com/news/20260724" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "患者30人とメールのみ216人、医療従事者1,535人、委託元関係者113人と46人が対象です。合計1,940人と報告しています。", "en": "The disclosed groups are 30 patients, 216 email-only patient records, 1,535 medical professionals and two client-staff groups of 113 and 46, totaling 1,940." }, "locator": "§§1-4", "sourceUrls": [ "https://www.cmic-hci.com/news/20260724" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.asahi-kasei.co.jp/pharma/oshirase_20261006.html", "https://www.cmic-hci.com/news/20260724" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-124", "organization": "長野県", "supplied": { "date": "2026-07-24", "dateMeaning": "unverified", "count": { "text": "5万4,294人", "value": 54294, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "窓口で閲覧に供した紙の道路・下水道台帳に54,294人の氏名等が表示されていた事案です。全件閲覧を確認した人数ではなく、紙資料の公開処理として分けます。", "en": "A public paper display included 54,294 names. The document-publication mistake is not classified as remote intrusion." }, "disclosedAt": "2026-07-24", "sourceUrls": [ "https://www.pref.nagano.lg.jp/michikanri/happyou/260724press.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 54294, \"unit\": \"people\", \"scope\": \"names on paper road and sewer maps\"}]", "en": "Primary-source breakdown: [{\"value\": 54294, \"unit\": \"people\", \"scope\": \"names on paper road and sewer maps\"}]" }, "sourceUrls": [ "https://www.pref.nagano.lg.jp/michikanri/happyou/260724press.html" ], "locator": "§§1-3" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-10.shtm" ], "attemptedSourceUrls": [ "https://www.pref.nagano.lg.jp/michikanri/happyou/260724press.html", "https://www.town.nagawa.nagano.jp/soshiki/somu/johokoho/johokohocatv/1/cable-television/3042.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-125", "organization": "四万十市", "supplied": { "date": "2026-07-22", "dateMeaning": "unverified", "count": { "text": "522人", "value": 522, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "四万十市の522人について個別事故の一次資料を確認できませんでした。上書き処理に関する二次情報だけでは原因を確定しません。", "en": "The corresponding Shimanto first-party incident notice was not verified. Secondary reporting about overwriting data does not establish a cause or 522-person scope." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "四万十市の522人について個別事故の一次資料を確認できませんでした。上書き処理に関する二次情報だけでは原因を確定しません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-10.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-126", "organization": "三重県立久居農林高等学校", "supplied": { "date": "2026-07-21", "dateMeaning": "unverified", "count": { "text": "229人", "value": 229, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "mie-school-form-exposure-2026" ], "verified": { "summary": { "ja": "担当者が申込フォームの設定を変えた際、申込者全員に他の申込者の情報が見える設定にしていました。 申込者229人の名前、メール、中学校などが閲覧可能になりました。", "en": "A staff configuration change exposed other applicants’ information to all form respondents. Names, emails and school information for 229 applicants were accessible." }, "disclosedAt": "2026-07-22", "sourceUrls": [ "https://www.pref.mie.lg.jp/TOPICS/m0053100002.htm" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "担当者が申込フォームの設定を変えた際、申込者全員に他の申込者の情報が見える設定にしていました。", "en": "A staff configuration change exposed other applicants’ information to all form respondents." }, "locator": "§§1-5", "sourceUrls": [ "https://www.pref.mie.lg.jp/TOPICS/m0053100002.htm" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "申込者229人の名前、メール、中学校などが閲覧可能になりました。", "en": "Names, emails and school information for 229 applicants were accessible." }, "locator": "§§1-5", "sourceUrls": [ "https://www.pref.mie.lg.jp/TOPICS/m0053100002.htm" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-10.shtm" ], "attemptedSourceUrls": [ "https://www.pref.mie.lg.jp/TOPICS/m0053100002.htm" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-127", "organization": "佐川急便", "supplied": { "date": "2026-07-19", "dateMeaning": "unverified", "count": { "text": "約7万人", "value": 70000, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "スマートクラブの7月の一次発表URLは404でした。9〜10月の佐川急便の別事案と統合せず、約7万人や復旧設定の説明は未検証のまま残します。", "en": "The July Smart Club notice returned 404. It is not merged with a separate September–October Sagawa event; the supplied approximately 70,000 people and recovery settings remain unverified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "スマートクラブの7月の一次発表URLは404でした。9〜10月の佐川急便の別事案と統合せず、約7万人や復旧設定の説明は未検証のまま残します。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www2.sagawa-exp.co.jp/information/detail/404/", "https://www2.sagawa-exp.co.jp/information/detail/419/", "https://www2.sagawa-exp.co.jp/information/detail/420", "https://www2.sagawa-exp.co.jp/information/detail/421" ], "retrievalFailures": [ { "url": "https://www2.sagawa-exp.co.jp/information/detail/404/", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-128", "organization": "熊本市", "supplied": { "date": "2026-07-18", "dateMeaning": "unverified", "count": { "text": "344人", "value": 344, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "熊本市の344人について一次資料の本文を確認できませんでした。二次情報の日付も提供一覧と異なり、公表日は未確定です。", "en": "No Kumamoto first-party notice body was verified. Secondary dates differ from the supplied listing; 344 people and disclosure timing remain unresolved." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "熊本市の344人について一次資料の本文を確認できませんでした。二次情報の日付も提供一覧と異なり、公表日は未確定です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-129", "organization": "名古屋医療センター", "supplied": { "date": "2026-07-17", "dateMeaning": "unverified", "count": { "text": "591人", "value": 591, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "私物USBを帰宅中に紛失し、公共交通の事業所から回収しました。患者591人の情報を保存していましたが、流出は未確認です。外部侵入には加えません。", "en": "A lost USB device covering 591 people was recovered. The announcement date has limited evidence; physical loss is excluded from intrusion counts." }, "disclosedAt": "2026-07-17", "sourceUrls": [ "https://nagoya.hosp.go.jp/wp-content/uploads/20260717_news_doc01.pdf" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 591, \"unit\": \"people\", \"scope\": \"patient data on a misplaced USB\"}]", "en": "Primary-source breakdown: [{\"value\": 591, \"unit\": \"people\", \"scope\": \"patient data on a misplaced USB\"}]" }, "sourceUrls": [ "https://nagoya.hosp.go.jp/wp-content/uploads/20260717_news_doc01.pdf" ], "locator": "pp.1-2 §§1-3" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-10.shtm" ], "attemptedSourceUrls": [ "https://nagoya.hosp.go.jp/wp-content/uploads/20260717_news_doc01.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-130", "organization": "平塚市立旭陵中学校", "supplied": { "date": "2026-07-16", "dateMeaning": "unverified", "count": { "text": "292人", "value": 292, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "紙のファイルをグラウンドに置き忘れ、生徒が発見しました。全生徒292人の出欠・学習情報を含む紙資料管理の事故です。", "en": "Paper student records were left outdoors, covering 292 students. This physical document loss is excluded from intrusion counts." }, "disclosedAt": "2026-07-16", "sourceUrls": [ "https://www.city.hiratsuka.kanagawa.jp/press/page02_e00001_03286.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 292, \"unit\": \"people\", \"scope\": \"student data in a misplaced paper folder\"}]", "en": "Primary-source breakdown: [{\"value\": 292, \"unit\": \"people\", \"scope\": \"student data in a misplaced paper folder\"}]" }, "sourceUrls": [ "https://www.city.hiratsuka.kanagawa.jp/press/page02_e00001_03286.html" ], "locator": "概要 / 個人情報の内容" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-10.shtm" ], "attemptedSourceUrls": [ "https://www.city.hiratsuka.kanagawa.jp/press/page02_e00001_03286.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-131", "organization": "K9ナチュラルジャパン", "supplied": { "date": "2026-07-14", "dateMeaning": "unverified", "count": { "text": "約6万件", "value": 60000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "k9natural-2026" ], "verified": { "summary": { "ja": "オンラインサービス管理サーバーに不正アクセスがありました。具体的な侵入原因は未公表です。 続報で個人情報の漏洩78,763件を確認しました。初報の約6万件から増加しました。カード情報の漏洩はありません。", "en": "The online-service management server was accessed without authorization; the entry cause is undisclosed. The follow-up confirmed 78,763 leaked records, revised upward from about 60,000; card data was not leaked." }, "disclosedAt": "2026-07-14", "sourceUrls": [ "https://www.k9natural.jp/blogs/news/%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E3%81%8A%E5%AE%A2%E6%A7%98%E6%83%85%E5%A0%B1%E6%B5%81%E5%87%BA%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E8%AA%BF%E6%9F%BB%E7%B5%90%E6%9E%9C%E3%81%AE%E3%81%94%E5%A0%B1%E5%91%8A" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "オンラインサービス管理サーバーに不正アクセスがありました。具体的な侵入原因は未公表です。", "en": "The online-service management server was accessed without authorization; the entry cause is undisclosed." }, "locator": "9月4日報告 概要 / 二次被害", "sourceUrls": [ "https://www.k9natural.jp/blogs/news/%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E3%81%8A%E5%AE%A2%E6%A7%98%E6%83%85%E5%A0%B1%E6%B5%81%E5%87%BA%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E8%AA%BF%E6%9F%BB%E7%B5%90%E6%9E%9C%E3%81%AE%E3%81%94%E5%A0%B1%E5%91%8A" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "続報で個人情報の漏洩78,763件を確認しました。初報の約6万件から増加しました。カード情報の漏洩はありません。", "en": "The follow-up confirmed 78,763 leaked records, revised upward from about 60,000; card data was not leaked." }, "locator": "9月4日報告 概要 / 二次被害", "sourceUrls": [ "https://www.k9natural.jp/blogs/news/%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E3%81%8A%E5%AE%A2%E6%A7%98%E6%83%85%E5%A0%B1%E6%B5%81%E5%87%BA%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E8%AA%BF%E6%9F%BB%E7%B5%90%E6%9E%9C%E3%81%AE%E3%81%94%E5%A0%B1%E5%91%8A" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.k9natural.jp/", "https://www.k9natural.jp/blogs/news/%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E3%81%8A%E5%AE%A2%E6%A7%98%E6%83%85%E5%A0%B1%E6%B5%81%E5%87%BA%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%8A%E9%A1%98%E3%81%84", "https://www.k9natural.jp/blogs/news/%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E3%81%8A%E5%AE%A2%E6%A7%98%E6%83%85%E5%A0%B1%E6%B5%81%E5%87%BA%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E8%AA%BF%E6%9F%BB%E7%B5%90%E6%9E%9C%E3%81%AE%E3%81%94%E5%A0%B1%E5%91%8A" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-132", "organization": "海外貨物検査", "supplied": { "date": "2026-07-14", "dateMeaning": "unverified", "count": { "text": "924件", "value": 924, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued-partial", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "omic-support-scam-2026" ], "verified": { "summary": { "ja": "契約審査員が偽警告に従い、貸与PCを第三者へ遠隔操作させました。 氏名924件、職歴183件等の項目別内訳です。内訳を足して人数に換算しません。", "en": "An inspector followed a fake warning and allowed remote control of a loaned PC. The notice lists 924 name and 183 career-history records among other fields; counts are not summed as unique people." }, "disclosedAt": null, "sourceUrls": [ "https://omicnet.com/uncategorized/%e5%80%8b%e4%ba%ba%e6%83%85%e5%a0%b1%e6%bc%8f%e6%b4%a9%e3%81%ae%e3%81%8a%e3%81%9d%e3%82%8c%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e3%81%8a%e7%9f%a5%e3%82%89%e3%81%9b%e3%81%a8%e3%81%8a%e8%a9%ab%e3%81%b3/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "契約審査員が偽警告に従い、貸与PCを第三者へ遠隔操作させました。", "en": "An inspector followed a fake warning and allowed remote control of a loaned PC." }, "locator": "§§1-5", "sourceUrls": [ "https://omicnet.com/uncategorized/%e5%80%8b%e4%ba%ba%e6%83%85%e5%a0%b1%e6%bc%8f%e6%b4%a9%e3%81%ae%e3%81%8a%e3%81%9d%e3%82%8c%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e3%81%8a%e7%9f%a5%e3%82%89%e3%81%9b%e3%81%a8%e3%81%8a%e8%a9%ab%e3%81%b3/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "氏名924件、職歴183件等の項目別内訳です。内訳を足して人数に換算しません。", "en": "The notice lists 924 name and 183 career-history records among other fields; counts are not summed as unique people." }, "locator": "§§1-5", "sourceUrls": [ "https://omicnet.com/uncategorized/%e5%80%8b%e4%ba%ba%e6%83%85%e5%a0%b1%e6%bc%8f%e6%b4%a9%e3%81%ae%e3%81%8a%e3%81%9d%e3%82%8c%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e3%81%8a%e7%9f%a5%e3%82%89%e3%81%9b%e3%81%a8%e3%81%8a%e8%a9%ab%e3%81%b3/" ] } ] }, "gaps": [ { "ja": "初報日を一次資料で確認できていません。", "en": "The first disclosure date is not established by primary evidence." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-11.shtm" ], "attemptedSourceUrls": [ "https://omicnet.com/uncategorized/%E5%80%8B%E4%BA%BA%E6%83%85%E5%A0%B1%E6%BC%8F%E6%B4%A9%E3%81%AE%E3%81%8A%E3%81%9D%E3%82%8C%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E7%9F%A5%E3%82%89%E3%81%9B%E3%81%A8%E3%81%8A%E8%A9%AB%E3%81%B3/", "https://omicnet.com/uncategorized/%e5%80%8b%e4%ba%ba%e6%83%85%e5%a0%b1%e6%bc%8f%e6%b4%a9%e3%81%ae%e3%81%8a%e3%81%9d%e3%82%8c%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e3%81%8a%e7%9f%a5%e3%82%89%e3%81%9b%e3%81%a8%e3%81%8a%e8%a9%ab%e3%81%b3/" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-133", "organization": "メディア4u", "supplied": { "date": "2026-07-14", "dateMeaning": "unverified", "count": { "text": "9万5,412件", "value": 95412, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "media4u-account-list-2026" ], "verified": { "summary": { "ja": "SMS配信サービスで不正アクセスがあり、管理情報が流出しました。初期侵入方法は未公表です。 管理一覧95,412件のうち個人情報を含みうる対象は22,928件です。1社のアカウントで不正SMS280通が送信されました。認証秘密は対象外です。", "en": "Unauthorized access to the SMS delivery service exposed account-management information; initial entry is undisclosed. Of 95,412 management-list records, 22,928 may contain personal data. One client account sent 280 unauthorized messages; authentication secrets were excluded." }, "disclosedAt": "2026-07-14", "sourceUrls": [ "https://www.media4u.co.jp/news/3354", "https://www.media4u.co.jp/news/3351" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "SMS配信サービスで不正アクセスがあり、管理情報が流出しました。初期侵入方法は未公表です。", "en": "Unauthorized access to the SMS delivery service exposed account-management information; initial entry is undisclosed." }, "locator": "7月17日第二報 §§1-4 / FAQ", "sourceUrls": [ "https://www.media4u.co.jp/news/3354" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "管理一覧95,412件のうち個人情報を含みうる対象は22,928件です。1社のアカウントで不正SMS280通が送信されました。認証秘密は対象外です。", "en": "Of 95,412 management-list records, 22,928 may contain personal data. One client account sent 280 unauthorized messages; authentication secrets were excluded." }, "locator": "7月17日第二報 §§1-4 / FAQ", "sourceUrls": [ "https://www.media4u.co.jp/news/3354" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.media4u.co.jp/news/3351", "https://www.media4u.co.jp/news/3354" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-134", "organization": "南砺市", "supplied": { "date": "2026-07-13", "dateMeaning": "unverified", "count": { "text": "1,380件", "value": 1380, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "南砺市の1,380件に対応する事故の一次発表を特定できませんでした。", "en": "No corresponding Nanto first-party notice for 1,380 records was located." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "南砺市の1,380件に対応する事故の一次発表を特定できませんでした。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-135", "organization": "ヨプの王豚塩焼 赤坂店", "supplied": { "date": "2026-07-13", "dateMeaning": "unverified", "count": { "text": "284人", "value": 284, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "店舗の284人に関する、本文を検証できるHTTPSの一次資料を取得できませんでした。カード会社の一般的な注意喚起を人数や従業員関与の根拠へ転用しません。", "en": "A verifiable HTTPS first-party restaurant statement was unavailable. Generic card-provider notices do not establish 284 people or employee involvement." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "店舗の284人に関する、本文を検証できるHTTPSの一次資料を取得できませんでした。カード会社の一般的な注意喚起を人数や従業員関与の根拠へ転用しません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-136", "organization": "福岡大学", "supplied": { "date": "2026-07-09", "dateMeaning": "unverified", "count": { "text": "最大3万3,668人", "value": 33668, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "nostrum-smartspi-2026" ], "verified": { "summary": { "ja": "委託先ノストラムのネットワークに侵入され、ファイル暗号化とバックドア設置を確認しました。 最大33,668人の学籍番号・生年月日・模試結果と、登録者最大800人の氏名が対象です。持ち出しの直接証拠は確認されていません。", "en": "The vendor Nostrum’s network was compromised; file encryption and a backdoor were confirmed. Up to 33,668 students’ identifiers, dates of birth and mock-test results and up to 800 registered names may be affected; direct extraction evidence was not found." }, "disclosedAt": "2026-07-09", "sourceUrls": [ "https://www.fukuoka-u.ac.jp/news/26/07/08175927.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "委託先ノストラムのネットワークに侵入され、ファイル暗号化とバックドア設置を確認しました。", "en": "The vendor Nostrum’s network was compromised; file encryption and a backdoor were confirmed." }, "locator": "§§1-4", "sourceUrls": [ "https://www.fukuoka-u.ac.jp/news/26/07/08175927.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大33,668人の学籍番号・生年月日・模試結果と、登録者最大800人の氏名が対象です。持ち出しの直接証拠は確認されていません。", "en": "Up to 33,668 students’ identifiers, dates of birth and mock-test results and up to 800 registered names may be affected; direct extraction evidence was not found." }, "locator": "§§1-4", "sourceUrls": [ "https://www.fukuoka-u.ac.jp/news/26/07/08175927.html" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.fukuoka-u.ac.jp/news/26/07/08175927.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-137", "organization": "オリックス生命", "supplied": { "date": "2026-07-07", "dateMeaning": "unverified", "count": { "text": "6,316件", "value": 6316, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "オリックス生命の6,316件に対応する一次発表の本文を特定できませんでした。", "en": "No corresponding Orix Life first-party notice body for 6,316 records was located." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "オリックス生命の6,316件に対応する一次発表の本文を特定できませんでした。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-138", "organization": "杏林学園", "supplied": { "date": "2026-07-07", "dateMeaning": "unverified", "count": { "text": "約2,500件", "value": 2500, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "kyorin-remote-pc-2026" ], "verified": { "summary": { "ja": "在宅勤務中の教員が偽サイトへ誘導され、パソコンを外部から遠隔操作されました。 学生、教職員、学会会員など約2,500人の情報が流出した可能性があります。", "en": "A faculty member working from home was directed to a fake website and their computer remotely accessed. Information about approximately 2,500 students, staff and society members may have been disclosed." }, "disclosedAt": "2026-07-08", "sourceUrls": [ "https://www.kyorin-u.ac.jp/univ/news/4087/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "在宅勤務中の教員が偽サイトへ誘導され、パソコンを外部から遠隔操作されました。", "en": "A faculty member working from home was directed to a fake website and their computer remotely accessed." }, "locator": "発覚経緯 / 対象情報 / 対応", "sourceUrls": [ "https://www.kyorin-u.ac.jp/univ/news/4087/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "学生、教職員、学会会員など約2,500人の情報が流出した可能性があります。", "en": "Information about approximately 2,500 students, staff and society members may have been disclosed." }, "locator": "発覚経緯 / 対象情報 / 対応", "sourceUrls": [ "https://www.kyorin-u.ac.jp/univ/news/4087/" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.kyorin-u.ac.jp/univ/news/4087/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-139", "organization": "長野県", "supplied": { "date": "2026-07-06", "dateMeaning": "unverified", "count": { "text": "1,590人", "value": 1590, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "入札図面に氏名・地番を残して公開した資料確認の不備です。外部侵入やシステム権限の不具合は公表されていません。", "en": "Names of 1,590 people remained in public tender diagrams after incomplete redaction. This document-handling failure is outside intrusion counts." }, "disclosedAt": "2026-07-06", "sourceUrls": [ "https://www.pref.nagano.lg.jp/gijukan/happyou/documents/202607061430press.pdf" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 1590, \"unit\": \"people\", \"qualifier\": \"investigation-in-progress\"}]", "en": "Primary-source breakdown: [{\"value\": 1590, \"unit\": \"people\", \"qualifier\": \"investigation-in-progress\"}]" }, "sourceUrls": [ "https://www.pref.nagano.lg.jp/gijukan/happyou/documents/202607061430press.pdf" ], "locator": "p.1 §§1-4" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-11.shtm" ], "attemptedSourceUrls": [ "https://www.pref.nagano.lg.jp/gijukan/happyou/20260706press.html", "https://www.pref.nagano.lg.jp/gijukan/happyou/documents/202607061430press.pdf", "https://www.town.nagawa.nagano.jp/soshiki/somu/johokoho/johokohocatv/1/cable-television/3042.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-140", "organization": "ユニマットライフ", "supplied": { "date": "2026-07-03", "dateMeaning": "unverified", "count": { "text": "12万6,947件", "value": 126947, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "注文書Excelに顧客リストを残したままメール添付した事案です。送付先の全社が削除・外部転送なしと回答しています。侵入は公表されていません。", "en": "A spreadsheet mistakenly retained customer information and was sent externally. The source’s 126,947 record/person unit is ambiguous and is not normalized as distinct people." }, "disclosedAt": "2026-07-03", "sourceUrls": [ "https://www.unimat-life.co.jp/pages/news/333" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 126947, \"unit\": \"records-or-people\", \"qualifier\": \"source-ambiguous\"}]", "en": "Primary-source breakdown: [{\"value\": 126947, \"unit\": \"records-or-people\", \"qualifier\": \"source-ambiguous\"}]" }, "sourceUrls": [ "https://www.unimat-life.co.jp/pages/news/333" ], "locator": "§§1-3" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.unimat-life.co.jp/pages/news/333" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-141", "organization": "加賀ソルネット", "supplied": { "date": "2026-07-01", "dateMeaning": "unverified", "count": { "text": "約17万件", "value": 170000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "kaga-solnet-2026" ], "verified": { "summary": { "ja": "システムの脆弱性を悪用した不正アクセスがありました。製品、CVE、修正の提供時期は未公表です。 165,587人の情報流出を確認しました。初報の最大約17万人から精査されました。流出ファイルにパスワードはなく、カード情報も保持していません。", "en": "A system vulnerability was exploited; the product, CVE and prior patch availability are undisclosed. Exfiltration affecting 165,587 people was confirmed, revising the initial maximum of about 170,000. Leaked files contained no passwords; card data was not stored." }, "disclosedAt": "2026-07-01", "sourceUrls": [ "https://www.solnet.ne.jp/news/20260817" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "システムの脆弱性を悪用した不正アクセスがありました。製品、CVE、修正の提供時期は未公表です。", "en": "A system vulnerability was exploited; the product, CVE and prior patch availability are undisclosed." }, "locator": "8月17日第二報 §§1-5", "sourceUrls": [ "https://www.solnet.ne.jp/news/20260817" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "165,587人の情報流出を確認しました。初報の最大約17万人から精査されました。流出ファイルにパスワードはなく、カード情報も保持していません。", "en": "Exfiltration affecting 165,587 people was confirmed, revising the initial maximum of about 170,000. Leaked files contained no passwords; card data was not stored." }, "locator": "8月17日第二報 §§1-5", "sourceUrls": [ "https://www.solnet.ne.jp/news/20260817" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.kgem.co.jp/news/news260701/", "https://www.solnet.ne.jp/news/20260817" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-142", "organization": "アフラック生命", "supplied": { "date": "2026-06-30", "dateMeaning": "unverified", "count": { "text": "約442万件", "value": 4420000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "aflac-japan-2026" ], "verified": { "summary": { "ja": "顧客約440万人と代理店約4万店。顧客の口座情報対象約22万人は内数です。", "en": "Reviewed against the cited primary notice; see linked catalog claims for confirmed scope and corrections." }, "disclosedAt": "2026-06-30", "sourceUrls": [ "https://www.aflac.co.jp/static/corp/profile/news/2026/2026073100.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "アクセスとデータ照会への制御が不十分で、通常利用に似た形式のアクセスを直ちに検知できませんでした。設計レビューと侵入テストでも手口を想定できていなかったと説明しています。", "en": "Aflac described insufficient access and query controls; reviews and penetration tests had not anticipated the method." }, "locator": "4. 発生原因", "sourceUrls": [ "https://www.aflac.co.jp/static/corp/profile/news/2026/2026073100.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "顧客約440万人（うち口座情報を含む約22万人）と代理店約4万店の個人情報が漏えいしました。顧客数と口座情報の対象者数を合算しません。", "en": "The disclosed scope was about 4.4 million customers, including about 220,000 with bank-account information, and about 40,000 agencies. The customer subsets are not additive." }, "locator": "2. 漏えいした個人情報", "sourceUrls": [ "https://www.aflac.co.jp/static/corp/profile/news/2026/2026073100.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-11.shtm" ], "attemptedSourceUrls": [ "https://www.aflac.co.jp/static/corp/profile/news/2026/20260630.pdf", "https://www.aflac.co.jp/static/corp/profile/news/2026/20260713.pdf", "https://www.aflac.co.jp/static/corp/profile/news/2026/2026073100.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-143", "organization": "農林中央金庫", "supplied": { "date": "2026-06-30", "dateMeaning": "unverified", "count": { "text": "3,176件", "value": 3176, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "改修テストで本番の個人データを関係団体と開発委託先へ誤って提供した事案です。外部からの侵入は公表されていません。", "en": "A testing tool was mistakenly provided personal data covering 3,176 records. This manual provision error is not classified as external intrusion." }, "disclosedAt": "2026-06-30", "sourceUrls": [ "https://www.ja-sapporo.or.jp/notices/20260630/" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 3176, \"unit\": \"records\", \"qualifier\": \"reported\"}]", "en": "Primary-source breakdown: [{\"value\": 3176, \"unit\": \"records\", \"qualifier\": \"reported\"}]" }, "sourceUrls": [ "https://www.ja-sapporo.or.jp/notices/20260630/" ], "locator": "§§1-3" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.ja-sapporo.or.jp/notices/20260630/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-144", "organization": "ピックルボールワン", "supplied": { "date": "2026-06-30", "dateMeaning": "unverified", "count": { "text": "最大1,853人", "value": 1853, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "pickleballone-plugin-2026" ], "verified": { "summary": { "ja": "外部ソフトウェアのプラグインの脆弱性を悪用され、サーバーに不正プログラムを設置されました。 最大約1,853人の会員情報が対象の可能性があります。外部へ持ち出された痕跡は未確認で、カード情報は保持していません。", "en": "An external plugin vulnerability was exploited to install malicious server programs. Up to about 1,853 members may be affected; extraction traces were not found and card data was not stored." }, "disclosedAt": "2026-06-30", "sourceUrls": [ "https://company.pickle-one.com/news/20260630" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "外部ソフトウェアのプラグインの脆弱性を悪用され、サーバーに不正プログラムを設置されました。", "en": "An external plugin vulnerability was exploited to install malicious server programs." }, "locator": "§§1-4", "sourceUrls": [ "https://company.pickle-one.com/news/20260630" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "最大約1,853人の会員情報が対象の可能性があります。外部へ持ち出された痕跡は未確認で、カード情報は保持していません。", "en": "Up to about 1,853 members may be affected; extraction traces were not found and card data was not stored." }, "locator": "§§1-4", "sourceUrls": [ "https://company.pickle-one.com/news/20260630" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://company.pickle-one.com/news/20260630" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-145", "organization": "小松島市", "supplied": { "date": "2026-06-25", "dateMeaning": "unverified", "count": { "text": "1,906件", "value": 1906, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "メール添付ファイルのフィルターを解除すると全農業者のデータが見える状態で誤送信しました。侵入やソフトウェアの欠陥ではなく、送信データの確認不備と説明されています。", "en": "Filtering or hiding spreadsheet rows did not remove 1,906 records. Parcel counts are a different unit; this file-sharing mistake is excluded from intrusion counts." }, "disclosedAt": "2026-06-25", "sourceUrls": [ "https://www.city.komatsushima.lg.jp/docs/5924575.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 1906, \"unit\": \"records\", \"qualifier\": \"reported\"}, {\"value\": 15372, \"unit\": \"land-parcels\", \"qualifier\": \"separate-scope\"}]", "en": "Primary-source breakdown: [{\"value\": 1906, \"unit\": \"records\", \"qualifier\": \"reported\"}, {\"value\": 15372, \"unit\": \"land-parcels\", \"qualifier\": \"separate-scope\"}]" }, "sourceUrls": [ "https://www.city.komatsushima.lg.jp/docs/5924575.html" ], "locator": "§§1-4" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.city.komatsushima.lg.jp/docs/5924575.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-146", "organization": "近畿大学", "supplied": { "date": "2026-06-25", "dateMeaning": "unverified", "count": { "text": "249人", "value": 249, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "近畿大学の該当発表URLは404でした。現在の一覧や検索結果だけではGoogle Driveの状態や249人を検証できません。", "en": "The Kindai notice returned 404. Current index pages and snippets cannot establish Drive sharing configuration or 249 affected people." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "近畿大学の該当発表URLは404でした。現在の一覧や検索結果だけではGoogle Driveの状態や249人を検証できません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-11.shtm" ], "attemptedSourceUrls": [ "https://www.kindai.ac.jp/pharmacy/news/important/2026/06/050615.html" ], "retrievalFailures": [ { "url": "https://www.kindai.ac.jp/pharmacy/news/important/2026/06/050615.html", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-147", "organization": "KDDI", "supplied": { "date": "2026-06-23", "dateMeaning": "unverified", "count": { "text": "最大1,422万件", "value": 14220000, "unit": "件", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "kddi-isp-2026" ], "verified": { "summary": { "ja": "既存DBは7月21日訂正後の数字を収録済み。提供一覧の最大1,422万件を現行値として使わない。", "en": "The original listing was checked against the cited primary notice; use the linked catalog claims for corrected facts and scope." }, "disclosedAt": "2026-06-23", "sourceUrls": [ "https://newsroom.kddi.com/news/assets/2026/kddi_nr_s-73_4619/kddi_nr_s-73_4619_pdf_01.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "悪用は5月16日から始まり、6月17日の発見時点で提供元も未把握の脆弱性でした。", "en": "Exploitation began May 16; the vendor was unaware of the vulnerability at June 17 detection." }, "locator": "3. 発生原因および対応", "sourceUrls": [ "https://newsroom.kddi.com/news/assets/2026/kddi_nr_s-73_4619/kddi_nr_s-73_4619_pdf_01.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "7月21日の訂正後の対象はメールアドレス1,223万1,954人、うちパスワード流出761万6,173人です。", "en": "Corrected July 21 counts are 12,231,954 email-address holders, including 7,616,173 with password leakage." }, "locator": "2. 情報流出の詳細（7月21日訂正）", "sourceUrls": [ "https://newsroom.kddi.com/news/assets/2026/kddi_nr_s-73_4619/kddi_nr_s-73_4619_pdf_01.pdf" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-11.shtm" ], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": false }, { "id": "U2026-148", "organization": "2りんかんイエローハット", "supplied": { "date": "2026-06-19", "dateMeaning": "unverified", "count": { "text": "317万9,454人", "value": 3179454, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "2rinkan-api-2026" ], "verified": { "summary": { "ja": "アプリのAPIを悪用して会員専用サーバーの情報が取得されました。具体的な認可不備や脆弱性の内容は未公表です。 3,179,454人分の会員情報が流出しました。第二報の最大3,455,754人分から修正されました。決済情報は別管理で対象外です。", "en": "The application API was abused to retrieve membership data; the specific authorization defect or vulnerability is undisclosed. Membership information for 3,179,454 people was leaked, revised from a maximum of 3,455,754. Separately managed payment data was excluded." }, "disclosedAt": "2026-04-23", "sourceUrls": [ "https://2rinkan.jp/annai/20260423/" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "アプリのAPIを悪用して会員専用サーバーの情報が取得されました。具体的な認可不備や脆弱性の内容は未公表です。", "en": "The application API was abused to retrieve membership data; the specific authorization defect or vulnerability is undisclosed." }, "locator": "6月19日最終報 §§1-3 / 4月23日第一報", "sourceUrls": [ "https://2rinkan.jp/annai/20260423/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "3,179,454人分の会員情報が流出しました。第二報の最大3,455,754人分から修正されました。決済情報は別管理で対象外です。", "en": "Membership information for 3,179,454 people was leaked, revised from a maximum of 3,455,754. Separately managed payment data was excluded." }, "locator": "6月19日最終報 §§1-3 / 4月23日第一報", "sourceUrls": [ "https://2rinkan.jp/annai/20260423/" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://2rinkan.jp/annai/20260423/", "https://www.yellowhat.jp/information/yellowhat/202608.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-149", "organization": "佐渡市", "supplied": { "date": "2026-06-19", "dateMeaning": "unverified", "count": { "text": "4,111件", "value": 4111, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "佐渡市の4,111件について個別事故の一次資料を確認できませんでした。メールサーバーに関する二次情報は未検証です。", "en": "No corresponding Sado first-party incident notice was verified. The supplied 4,111-record mail-server scope remains unconfirmed." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "佐渡市の4,111件について個別事故の一次資料を確認できませんでした。メールサーバーに関する二次情報は未検証です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-150", "organization": "大阪国税局", "supplied": { "date": "2026-06-19", "dateMeaning": "unverified", "count": { "text": "259件", "value": 259, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "大阪国税局の259件について原資料を確認できませんでした。二次情報は一覧と異なる4月の日付を示しており、発生・公表日は未確定です。", "en": "The Osaka tax-office primary notice was unavailable. Secondary reporting gives an April date differing from the listing; the 259-record scope and timing remain unresolved." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "大阪国税局の259件について原資料を確認できませんでした。二次情報は一覧と異なる4月の日付を示しており、発生・公表日は未確定です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-151", "organization": "小松製作所", "supplied": { "date": "2026-06-16", "dateMeaning": "unverified", "count": { "text": "13万9,302件", "value": 139302, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "komatsu-user-directory-exposure-2026" ], "verified": { "summary": { "ja": "利用者管理や関連システムの設計・設定・運用に不備があり、権限を持つ利用者間で必要以上の個人情報が見えていました。 初報は139,302人。追加点検で214,916人、29,621人、86,015人、46,445人の別の対象範囲を確認しました。重複があり合算できません。インターネット全体への公開ではありません。", "en": "Design, configuration and operational defects allowed authorized users to view personal information beyond the necessary scope. The first notice covered 139,302 people; further reviews found scopes of 214,916, 29,621, 86,015 and 46,445. Overlap prevents addition; the data was not publicly accessible on the internet." }, "disclosedAt": "2026-06-16", "sourceUrls": [ "https://www.komatsu.jp/ja/newsroom/2026/20260915", "https://www.komatsu.jp/ja/newsroom/2026/20260616_3" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "利用者管理や関連システムの設計・設定・運用に不備があり、権限を持つ利用者間で必要以上の個人情報が見えていました。", "en": "Design, configuration and operational defects allowed authorized users to view personal information beyond the necessary scope." }, "locator": "9月15日 §§1-3 / 6月16日 §§1-5", "sourceUrls": [ "https://www.komatsu.jp/ja/newsroom/2026/20260915" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "初報は139,302人。追加点検で214,916人、29,621人、86,015人、46,445人の別の対象範囲を確認しました。重複があり合算できません。インターネット全体への公開ではありません。", "en": "The first notice covered 139,302 people; further reviews found scopes of 214,916, 29,621, 86,015 and 46,445. Overlap prevents addition; the data was not publicly accessible on the internet." }, "locator": "9月15日 §§1-3 / 6月16日 §§1-5", "sourceUrls": [ "https://www.komatsu.jp/ja/newsroom/2026/20260915" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.komatsu.jp/ja/newsroom/2026/20260616_3", "https://www.komatsu.jp/ja/newsroom/2026/20260915" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-152", "organization": "ミカサ", "supplied": { "date": "2026-06-16", "dateMeaning": "unverified", "count": { "text": "最大4,298人", "value": 4298, "unit": "人", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "廃棄PCの破損処理が不十分でデータが残ったまま第三者へ流通した事案です。システムへの外部侵入は公表されていません。", "en": "A discarded PC was not sufficiently destroyed, potentially exposing 4,298 people. Physical disposal is outside remote-intrusion counts." }, "disclosedAt": "2026-06-16", "sourceUrls": [ "https://mikasasports.co.jp/%e9%87%8d%e8%a6%81%e3%81%aa%e3%81%8a%e7%9f%a5%e3%82%89%e3%81%9b/20520/" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 4298, \"unit\": \"people\", \"qualifier\": \"maximum\"}]", "en": "Primary-source breakdown: [{\"value\": 4298, \"unit\": \"people\", \"qualifier\": \"maximum\"}]" }, "sourceUrls": [ "https://mikasasports.co.jp/%e9%87%8d%e8%a6%81%e3%81%aa%e3%81%8a%e7%9f%a5%e3%82%89%e3%81%9b/20520/" ], "locator": "概要 / 漏えいした可能性がある情報" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://mikasasports.co.jp/%e9%87%8d%e8%a6%81%e3%81%aa%e3%81%8a%e7%9f%a5%e3%82%89%e3%81%9b/20520/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-153", "organization": "佐嘉平川屋", "supplied": { "date": "2026-06-15", "dateMeaning": "unverified", "count": { "text": "7万3,213件", "value": 73213, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "saga-hirakawaya-payment-2026" ], "verified": { "summary": { "ja": "システムの脆弱性を悪用し、決済アプリケーションを改ざんされました。 個人情報73,213件は30,170人分、カード情報6,303件は5,783人分です。件数と人数は別の集計で、両者の重複は不明です。カード情報にはセキュリティコードを含みます。", "en": "A system vulnerability was exploited to alter the payment application. 73,213 personal-data records represent 30,170 people; 6,303 card records represent 5,783 people. Record and person counts are distinct; overlap is unknown. Card data includes security codes." }, "disclosedAt": "2026-06-15", "sourceUrls": [ "https://www.saga-hirakawaya.jp/documents/pdf/202606-public-notice.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "システムの脆弱性を悪用し、決済アプリケーションを改ざんされました。", "en": "A system vulnerability was exploited to alter the payment application." }, "locator": "pp.1-3 §§1-5", "sourceUrls": [ "https://www.saga-hirakawaya.jp/documents/pdf/202606-public-notice.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "個人情報73,213件は30,170人分、カード情報6,303件は5,783人分です。件数と人数は別の集計で、両者の重複は不明です。カード情報にはセキュリティコードを含みます。", "en": "73,213 personal-data records represent 30,170 people; 6,303 card records represent 5,783 people. Record and person counts are distinct; overlap is unknown. Card data includes security codes." }, "locator": "pp.1-3 §§1-5", "sourceUrls": [ "https://www.saga-hirakawaya.jp/documents/pdf/202606-public-notice.pdf" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.saga-hirakawaya.jp/documents/pdf/202606-public-notice.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-154", "organization": "日本テレネット", "supplied": { "date": "2026-06-12", "dateMeaning": "unverified", "count": { "text": "約104万1,044件", "value": 1041044, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued-partial", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "nihontelenet-ransomware-2026" ], "verified": { "summary": { "ja": "サーバーがランサムウェアとみられる攻撃で暗号化され、業務が停止しました。 委託先から預かった個人情報と従業員情報の流出が調査対象です。確認した初報には対象件数がありません。", "en": "A suspected ransomware attack encrypted servers and disrupted operations. Investigation covers entrusted personal data and employee information; the reviewed initial notice contains no total." }, "disclosedAt": "2026-03-17", "sourceUrls": [ "https://www.nippon-tele.net/release/20260317_4599/" ], "claims": [ { "topic": "entry", "status": "inferred", "text": { "ja": "サーバーがランサムウェアとみられる攻撃で暗号化され、業務が停止しました。", "en": "A suspected ransomware attack encrypted servers and disrupted operations." }, "locator": "経緯 / 現状 / 今後の対応", "sourceUrls": [ "https://www.nippon-tele.net/release/20260317_4599/" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "委託先から預かった個人情報と従業員情報の流出が調査対象です。確認した初報には対象件数がありません。", "en": "Investigation covers entrusted personal data and employee information; the reviewed initial notice contains no total." }, "locator": "経緯 / 現状 / 今後の対応", "sourceUrls": [ "https://www.nippon-tele.net/release/20260317_4599/" ] } ] }, "gaps": [ { "ja": "提供一覧の件数は、確認した一次資料では検証できていません。", "en": "The supplied count was not verified by the reviewed primary notice." } ], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.nippon-tele.net/release/20260317_4599/", "https://www.nippon-tele.net/release/20260612_4659/" ], "retrievalFailures": [ { "url": "https://www.nippon-tele.net/release/20260612_4659/", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-155", "organization": "川越商工会議所", "supplied": { "date": "2026-06-12", "dateMeaning": "unverified", "count": { "text": "4,363件", "value": 4363, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "Excelの個人情報を非表示にしただけの状態を削除済みと誤認し、会員データを外部へメール誤送信した事案です。侵入は公表されていません。", "en": "Unhidden spreadsheet data was accidentally sent externally, covering 4,363 records. This manual attachment error is not classified as intrusion." }, "disclosedAt": "2026-06-12", "sourceUrls": [ "https://www.kawagoe.or.jp/xo_event/%e3%80%90%e3%81%8a%e8%a9%ab%e3%81%b3%e3%80%91%e4%bc%9a%e5%93%a1%e6%83%85%e5%a0%b1%e3%81%ae%e6%bc%8f%e3%81%88%e3%81%84%e3%81%ab%e3%81%a4%e3%81%84%e3%81%a6/" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 4363, \"unit\": \"records\", \"qualifier\": \"reported\"}]", "en": "Primary-source breakdown: [{\"value\": 4363, \"unit\": \"records\", \"qualifier\": \"reported\"}]" }, "sourceUrls": [ "https://www.kawagoe.or.jp/xo_event/%e3%80%90%e3%81%8a%e8%a9%ab%e3%81%b3%e3%80%91%e4%bc%9a%e5%93%a1%e6%83%85%e5%a0%b1%e3%81%ae%e6%bc%8f%e3%81%88%e3%81%84%e3%81%ab%e3%81%a4%e3%81%84%e3%81%a6/" ], "locator": "§§1-4" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.kawagoe.or.jp/xo_event/%e3%80%90%e3%81%8a%e8%a9%ab%e3%81%b3%e3%80%91%e4%bc%9a%e5%93%a1%e6%83%85%e5%a0%b1%e3%81%ae%e6%bc%8f%e3%81%88%e3%81%84%e3%81%ab%e3%81%a4%e3%81%84%e3%81%a6/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-156", "organization": "D&M", "supplied": { "date": "2026-06-12", "dateMeaning": "unverified", "count": { "text": "633件", "value": 633, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "dandm-vpn-ransomware-2026" ], "verified": { "summary": { "ja": "VPN機器を経由して社内ファイル共有サーバーへ侵入され、ランサムウェアに感染しました。VPNの具体的な侵害手段は未公表です。 過去約2年のFAX受注情報633件が流出した可能性があります。カードや銀行口座情報は確認されていません。", "en": "An attacker entered through a VPN device and infected the file server with ransomware; the VPN compromise method is undisclosed. 633 fax-order records from approximately two years may have been disclosed; card and bank-account information was not identified." }, "disclosedAt": "2026-06-12", "sourceUrls": [ "https://www.rext.jp/ir/attachment/?%2F%E9%80%A3%E7%B5%90%E5%AD%90%E4%BC%9A%E7%A4%BE%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E3%82%B5%E3%83%BC%E3%83%90%E3%83%BC%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A.pdf=&field=0&id=81&inline=1" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "VPN機器を経由して社内ファイル共有サーバーへ侵入され、ランサムウェアに感染しました。VPNの具体的な侵害手段は未公表です。", "en": "An attacker entered through a VPN device and infected the file server with ransomware; the VPN compromise method is undisclosed." }, "locator": "pp.1-2 概要 / 原因 / 現在の状況", "sourceUrls": [ "https://www.rext.jp/ir/attachment/?%2F%E9%80%A3%E7%B5%90%E5%AD%90%E4%BC%9A%E7%A4%BE%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E3%82%B5%E3%83%BC%E3%83%90%E3%83%BC%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A.pdf=&field=0&id=81&inline=1" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "過去約2年のFAX受注情報633件が流出した可能性があります。カードや銀行口座情報は確認されていません。", "en": "633 fax-order records from approximately two years may have been disclosed; card and bank-account information was not identified." }, "locator": "pp.1-2 概要 / 原因 / 現在の状況", "sourceUrls": [ "https://www.rext.jp/ir/attachment/?%2F%E9%80%A3%E7%B5%90%E5%AD%90%E4%BC%9A%E7%A4%BE%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E3%82%B5%E3%83%BC%E3%83%90%E3%83%BC%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A.pdf=&field=0&id=81&inline=1" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.rext.jp/ir/attachment/?%2F%E9%80%A3%E7%B5%90%E5%AD%90%E4%BC%9A%E7%A4%BE%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E3%82%B5%E3%83%BC%E3%83%90%E3%83%BC%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A.pdf=&field=0&id=81&inline=1" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-157", "organization": "長崎県警", "supplied": { "date": "2026-06-12", "dateMeaning": "unverified", "count": { "text": "約4,600件", "value": 4600, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "長崎県警の該当URLは事故本文を含まないページでした。約4,600件や紙の廃棄という説明を確認済みにしません。", "en": "The alleged Nagasaki police source served a page without the incident body. Approximately 4,600 records and paper disposal remain unverified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "長崎県警の該当URLは事故本文を含まないページでした。約4,600件や紙の廃棄という説明を確認済みにしません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-11.shtm" ], "attemptedSourceUrls": [ "https://www.police.pref.nagasaki.jp/police/oomura/11oshirase/bunsyohaiki/" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-158", "organization": "Kaizen Tech Agent", "supplied": { "date": "2026-06-10", "dateMeaning": "unverified", "count": { "text": "9,721件", "value": 9721, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "Kaizen Tech Agentの該当発表URLは404でした。9,721件や内部者による持出しという説明を一次確認済みにしません。", "en": "The Kaizen Tech Agent notice returned 404. The supplied 9,721 records and alleged insider extraction were not verified from primary evidence." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "Kaizen Tech Agentの該当発表URLは404でした。9,721件や内部者による持出しという説明を一次確認済みにしません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [ "https://kaizentech.co.jp/5388/" ], "retrievalFailures": [ { "url": "https://kaizentech.co.jp/5388/", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-159", "organization": "高知工科大学", "supplied": { "date": "2026-06-09", "dateMeaning": "unverified", "count": { "text": "418件", "value": 418, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "高知工科大学の418件について個別事故の一次資料を確認できませんでした。端末紛失という二次情報は未検証です。", "en": "No corresponding Kochi University of Technology first-party incident notice was verified. The 418-record laptop-loss account remains unconfirmed." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "高知工科大学の418件について個別事故の一次資料を確認できませんでした。端末紛失という二次情報は未検証です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [], "attemptedSourceUrls": [], "retrievalFailures": [], "retry": true }, { "id": "U2026-160", "organization": "大阪弁護士会", "supplied": { "date": "2026-06-09", "dateMeaning": "unverified", "count": { "text": "5,000人以上", "value": 5000, "unit": "人", "qualifiers": [ "以上" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "大阪弁護士会の個別資料はTLS接続に失敗し、本文を確認できませんでした。5,000人以上や誤送信、一覧と異なる公表日は未検証です。", "en": "TLS retrieval failed for the Osaka bar-association notice. The more-than-5,000-person mis-send and date differing from the listing remain unverified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "大阪弁護士会の個別資料はTLS接続に失敗し、本文を確認できませんでした。5,000人以上や誤送信、一覧と異なる公表日は未検証です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-11.shtm" ], "attemptedSourceUrls": [ "https://www.osakaben.or.jp/index.php#info_area" ], "retrievalFailures": [ { "url": "https://www.osakaben.or.jp/index.php#info_area", "result": "unavailable", "reason": "TLS, HTTP or network retrieval failed; no body verification." } ], "retry": true }, { "id": "U2026-161", "organization": "九州電力送配電", "supplied": { "date": "2026-06-08", "dateMeaning": "unverified", "count": { "text": "最大1,354万件", "value": 13540000, "unit": "件", "qualifiers": [ "最大" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "サーバールーム内のバックアップ媒体の紛失です。外部からの侵入は確認されておらず、サイバー事故DBの集計から除外します。", "en": "A backup medium was lost. The current primary notice states up to 10.9 million service contracts, a different scope/unit from the input; physical loss is not remote intrusion." }, "disclosedAt": "2026-06-08", "sourceUrls": [ "https://www.kyuden.co.jp/td/press/2026/260608.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 10900000, \"unit\": \"contracts\", \"qualifier\": \"maximum\", \"note\": \"最新の本文は最大1,090万口。入力の1,354万件とは数値・単位が異なる。\"}]", "en": "Primary-source breakdown: [{\"value\": 10900000, \"unit\": \"contracts\", \"qualifier\": \"maximum\", \"note\": \"最新の本文は最大1,090万口。入力の1,354万件とは数値・単位が異なる。\"}]" }, "sourceUrls": [ "https://www.kyuden.co.jp/td/press/2026/260608.html" ], "locator": "紛失の概要 / 個人情報流出の可能性" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-11.shtm" ], "attemptedSourceUrls": [ "https://www.kyuden.co.jp/td/press/2026/260608.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-162", "organization": "北海道医療センター", "supplied": { "date": "2026-06-08", "dateMeaning": "unverified", "count": { "text": "約17万件", "value": 170000, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "廃棄業者が破砕すべきHDDを処理せず外部へ流通させた事案です。電子システムへの不正アクセスは公表されていません。", "en": "An uncleared HDD was resold, exposing cumulative records spanning about 170,000 people. Physical disposal is excluded from remote-intrusion counts." }, "disclosedAt": "2026-06-08", "sourceUrls": [ "https://hokkaido-mc.hosp.go.jp/common/img/index/202608.pdf" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 170000, \"unit\": \"people\", \"qualifier\": \"approximate\"}, {\"value\": 1760000, \"unit\": \"records\", \"qualifier\": \"cumulative\"}]", "en": "Primary-source breakdown: [{\"value\": 170000, \"unit\": \"people\", \"qualifier\": \"approximate\"}, {\"value\": 1760000, \"unit\": \"records\", \"qualifier\": \"cumulative\"}]" }, "sourceUrls": [ "https://hokkaido-mc.hosp.go.jp/common/img/index/202608.pdf" ], "locator": "pp.1-4 §1 / Q11" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://hokkaido-mc.hosp.go.jp/common/img/index/202608.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-163", "organization": "エン", "supplied": { "date": "2026-06-05", "dateMeaning": "unverified", "count": { "text": "約2,500件", "value": 2500, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "en-midcareer-credential-stuffing-2026" ], "verified": { "summary": { "ja": "外部で取得されたとみられるIDとパスワードを使うリスト型攻撃がありました。社内からの認証情報流出は確認されていません。 不正ログイン総数は2,503件です。ユニークな人数とは公表されていません。", "en": "Credential stuffing used IDs and passwords apparently obtained elsewhere; internal credential leakage was not found. The total is 2,503 unauthorized logins, not a disclosed count of unique people." }, "disclosedAt": "2026-06-05", "sourceUrls": [ "https://s3-ap-northeast-1.amazonaws.com/enjapanhp/wp-content/uploads/20260605094031/20260605_%E3%80%8C%E3%83%9F%E3%83%89%E3%83%AB%E3%81%AE%E8%BB%A2%E8%81%B7%E3%80%8D%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E7%99%BA%E7%94%9F%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A.pdf" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "外部で取得されたとみられるIDとパスワードを使うリスト型攻撃がありました。社内からの認証情報流出は確認されていません。", "en": "Credential stuffing used IDs and passwords apparently obtained elsewhere; internal credential leakage was not found." }, "locator": "pp.1-2 §§1-3", "sourceUrls": [ "https://s3-ap-northeast-1.amazonaws.com/enjapanhp/wp-content/uploads/20260605094031/20260605_%E3%80%8C%E3%83%9F%E3%83%89%E3%83%AB%E3%81%AE%E8%BB%A2%E8%81%B7%E3%80%8D%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E7%99%BA%E7%94%9F%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "不正ログイン総数は2,503件です。ユニークな人数とは公表されていません。", "en": "The total is 2,503 unauthorized logins, not a disclosed count of unique people." }, "locator": "pp.1-2 §§1-3", "sourceUrls": [ "https://s3-ap-northeast-1.amazonaws.com/enjapanhp/wp-content/uploads/20260605094031/20260605_%E3%80%8C%E3%83%9F%E3%83%89%E3%83%AB%E3%81%AE%E8%BB%A2%E8%81%B7%E3%80%8D%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E7%99%BA%E7%94%9F%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A.pdf" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://odawara-eng.co.jp/wp-content/uploads/2026/09/20260915.pdf", "https://s3-ap-northeast-1.amazonaws.com/enjapanhp/wp-content/uploads/20260605094031/20260605_%E3%80%8C%E3%83%9F%E3%83%89%E3%83%AB%E3%81%AE%E8%BB%A2%E8%81%B7%E3%80%8D%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E7%99%BA%E7%94%9F%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E3%81%8A%E8%A9%AB%E3%81%B3%E3%81%A8%E3%81%94%E5%A0%B1%E5%91%8A.pdf", "https://www.aida.co.jp/news/77898e7008265ee89562f5843f23724f65d0e7f4.pdf", "https://www.akatake.co.jp/news/2026/4527/", "https://www.orientaldiamond.jp/%E3%81%8A%E7%9F%A5%E3%82%89%E3%81%9B" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-164", "organization": "西宮市国際交流協会", "supplied": { "date": "2026-06-05", "dateMeaning": "unverified", "count": { "text": "373人", "value": 373, "unit": "人", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "西宮市国際交流協会の個別事故本文を一次資料で確認できませんでした。373人や誤送信という説明は未検証です。", "en": "No corresponding Nishinomiya first-party incident body was available. The supplied 373-person mis-send remains unverified." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "西宮市国際交流協会の個別事故本文を一次資料で確認できませんでした。373人や誤送信という説明は未検証です。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-12.shtm" ], "attemptedSourceUrls": [ "https://www.nishi.or.jp/shisei/seisaku/tabunkakyosei/nia/allNewsList.html" ], "retrievalFailures": [], "retry": true }, { "id": "U2026-165", "organization": "大阪市", "supplied": { "date": "2026-06-04", "dateMeaning": "unverified", "count": { "text": "111件", "value": 111, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "BCCへ入力すべき宛先を通常の宛先欄に入れてメール送信した事案です。侵入は公表されていません。", "en": "A To/BCC email-address mistake involved 111 addresses, including 57 personal and 54 organizational addresses. This is not 111 confirmed people or remote intrusion." }, "disclosedAt": "2026-06-04", "sourceUrls": [ "https://www.city.osaka.lg.jp/hodoshiryo/kenko/0000680432.html" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 57, \"unit\": \"addresses\", \"qualifier\": \"personal\"}, {\"value\": 54, \"unit\": \"addresses\", \"qualifier\": \"organization\"}]", "en": "Primary-source breakdown: [{\"value\": 57, \"unit\": \"addresses\", \"qualifier\": \"personal\"}, {\"value\": 54, \"unit\": \"addresses\", \"qualifier\": \"organization\"}]" }, "sourceUrls": [ "https://www.city.osaka.lg.jp/hodoshiryo/kenko/0000680432.html" ], "locator": "§§1-5" } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://www.city.osaka.lg.jp/hodoshiryo/kenko/0000680432.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-166", "organization": "ビジュアルアーツ", "supplied": { "date": "2026-06-03", "dateMeaning": "unverified", "count": { "text": "約1万3,600件", "value": 13600, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "visualarts-cloud-credentials-2026" ], "verified": { "summary": { "ja": "社内ポータル用クラウドストレージの認証情報を窃取され、社内情報を持ち出された可能性が高いと報告しています。 未発売ゲームデータの公開を確認しました。個人情報の対象は約13,559件で、人数とは限りません。マイナンバーを含む取引先・従業員情報もあります。", "en": "The company reports stolen cloud-storage credentials and likely extraction of internal information. Unreleased game data was published. Potential personal-data exposure totals about 13,559 records, not necessarily distinct people, including identifiers of some partners and employees." }, "disclosedAt": "2026-06-04", "sourceUrls": [ "https://visual-arts.jp/wp/wp-content/uploads/2026/06/VA20260604.pdf", "https://nhp.visual-arts.jp/wp/wp-content/uploads/2026/07/VA20260731.pdf" ], "claims": [ { "topic": "entry", "status": "inferred", "text": { "ja": "社内ポータル用クラウドストレージの認証情報を窃取され、社内情報を持ち出された可能性が高いと報告しています。", "en": "The company reports stolen cloud-storage credentials and likely extraction of internal information." }, "locator": "pp.1-3 §§1-6", "sourceUrls": [ "https://visual-arts.jp/wp/wp-content/uploads/2026/06/VA20260604.pdf" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "未発売ゲームデータの公開を確認しました。個人情報の対象は約13,559件で、人数とは限りません。マイナンバーを含む取引先・従業員情報もあります。", "en": "Unreleased game data was published. Potential personal-data exposure totals about 13,559 records, not necessarily distinct people, including identifiers of some partners and employees." }, "locator": "pp.1-3 §§1-6", "sourceUrls": [ "https://visual-arts.jp/wp/wp-content/uploads/2026/06/VA20260604.pdf" ] } ] }, "gaps": [], "discoveryUrls": [], "attemptedSourceUrls": [ "https://nhp.visual-arts.jp/wp/wp-content/uploads/2026/07/VA20260731.pdf", "https://visual-arts.jp/wp/wp-content/uploads/2026/06/VA20260604.pdf" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-167", "organization": "関西医科大学附属病院", "supplied": { "date": "2026-06-03", "dateMeaning": "unverified", "count": { "text": "約1,800件", "value": 1800, "unit": "件", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "excluded-non-cyber", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "医師のUSBを一時紛失後、数日後に回収しました。患者約1,800人の情報を保存していました。流出は未確認で、物理紛失として分けます。", "en": "A USB device containing about 1,800 records was lost and recovered. Physical loss is excluded from remote-intrusion counts." }, "disclosedAt": "2026-06-03", "sourceUrls": [ "https://hp.kmu.ac.jp/news/detail/170/" ], "claims": [ { "topic": "impact", "status": "confirmed", "text": { "ja": "一次資料の内訳：[{\"value\": 1800, \"unit\": \"people\", \"qualifiers\": [\"approximate\"], \"scope\": \"patient data on a misplaced USB\"}]", "en": "Primary-source breakdown: [{\"value\": 1800, \"unit\": \"people\", \"qualifiers\": [\"approximate\"], \"scope\": \"patient data on a misplaced USB\"}]" }, "sourceUrls": [ "https://hp.kmu.ac.jp/news/detail/170/" ], "locator": "本文 第1-4段落" } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-12.shtm" ], "attemptedSourceUrls": [ "https://hp.kmu.ac.jp/news/detail/170/" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-168", "organization": "藤田医科大学病院", "supplied": { "date": "2026-06-03", "dateMeaning": "unverified", "count": { "text": "1,365件", "value": 1365, "unit": "件", "qualifiers": [], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "catalogued", "reviewedAt": "2026-10-09", "catalogIncidentIds": [ "fujita-personal-pc-scam-2026" ], "verified": { "summary": { "ja": "規程に反して患者情報を私用PCに保存し、そのPCが偽警告のサポート詐欺で遠隔操作されました。 患者情報1,365件が潜在的対象です。病院システムへの影響は未確認です。", "en": "A personal PC held patient data against hospital rules and was remotely controlled through a support scam. 1,365 patient records may be affected; hospital clinical systems were unaffected." }, "disclosedAt": "2026-06-03", "sourceUrls": [ "https://hospital.fujita-hu.ac.jp/topics/i05j6a0000003uai.html" ], "claims": [ { "topic": "entry", "status": "confirmed", "text": { "ja": "規程に反して患者情報を私用PCに保存し、そのPCが偽警告のサポート詐欺で遠隔操作されました。", "en": "A personal PC held patient data against hospital rules and was remotely controlled through a support scam." }, "locator": "§§1-3", "sourceUrls": [ "https://hospital.fujita-hu.ac.jp/topics/i05j6a0000003uai.html" ] }, { "topic": "impact", "status": "confirmed", "text": { "ja": "患者情報1,365件が潜在的対象です。病院システムへの影響は未確認です。", "en": "1,365 patient records may be affected; hospital clinical systems were unaffected." }, "locator": "§§1-3", "sourceUrls": [ "https://hospital.fujita-hu.ac.jp/topics/i05j6a0000003uai.html" ] } ] }, "gaps": [], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-12.shtm" ], "attemptedSourceUrls": [ "https://hospital.fujita-hu.ac.jp/topics/i05j6a0000003uai.html" ], "retrievalFailures": [], "retry": false }, { "id": "U2026-169", "organization": "高知市立神田小学校", "supplied": { "date": "2026-06-03", "dateMeaning": "unverified", "count": { "text": "約1,850人", "value": 1850, "unit": "人", "qualifiers": [ "約" ], "scope": "unverified", "provenance": "user-supplied-unverified" }, "provenance": "user-supplied-unverified" }, "status": "awaiting-primary-source", "reviewedAt": "2026-10-09", "catalogIncidentIds": [], "verified": { "summary": { "ja": "高知市立神田小学校の個別事故資料を確認できませんでした。学校の一般ページだけでは約1,850人やサポート詐欺の説明を確認できません。", "en": "No corresponding Koda Elementary School first-party incident notice was verified. A general school page does not establish approximately 1,850 people or a support-scam chain." }, "disclosedAt": null, "sourceUrls": [], "claims": [] }, "gaps": [ { "ja": "高知市立神田小学校の個別事故資料を確認できませんでした。学校の一般ページだけでは約1,850人やサポート詐欺の説明を確認できません。", "en": "Primary evidence does not yet establish the supplied incident scope, count or cause; retain this candidate for follow-up." } ], "discoveryUrls": [ "https://www.pahoo.org/e-soul/privacy/casestudy/case-023-12.shtm" ], "attemptedSourceUrls": [ "https://koda-e.kochicity.jp/" ], "retrievalFailures": [], "retry": true } ] }