[ { "incident_id": "kddi-2026-06-23", "version": 1, "org_name": "KDDI株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "通信", "service_names": [ "BIGLOBEメール", "@niftyメール", "J:COM NET", "コミュファ光 メール", "ピカラ光 メール", "CPI レンタルサーバー メール" ], "via_vendor": "第三者製ソフトウェア（ISP向けメール基盤）", "occurred_from": "2026-05-16", "occurred_to": null, "detected_at": "2026-06-17", "published_at": "2026-06-23", "status": "possibility", "cause": "unauthorized_access", "affected_count": 14220000, "affected_scope": "KDDIが提供するISP向けメール基盤を利用する一部ISP（ビッグローブ、ニフティ、JCOM、ctc、STNet、KDDIウェブコミュニケーションズ）のメールサービス利用者", "leaked_fields": [ "email", "password" ], "response": { "days_detect_to_publish": 6, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": true, "followup_published": true, "followup_at": "2026-07-06", "announcement_still_online": null }, "source_urls": [ "https://internet.watch.impress.co.jp/docs/news/2122740.html", "https://k-tai.watch.impress.co.jp/docs/news/2122837.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.55, "notes": "初報は「最大1422万件の可能性」。二次記事のみから抽出。公式お知らせ未取得。", "source_kind": [ "press", "press" ] }, { "incident_id": "kddi-2026-06-23", "version": 2, "org_name": "KDDI株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "通信", "service_names": [ "BIGLOBEメール", "@niftyメール", "J:COM NET", "コミュファ光 メール", "ピカラ光 メール", "CPI レンタルサーバー メール" ], "via_vendor": "第三者製ソフトウェア（ISP向けメール基盤）", "occurred_from": "2026-05-16", "occurred_to": null, "detected_at": "2026-06-17", "published_at": "2026-07-06", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 12233087, "affected_scope": "同上。メールアドレス1223万3087件、うちパスワード761万6173件の漏えいを確認", "leaked_fields": [ "email", "password" ], "response": { "days_detect_to_publish": 6, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": true, "followup_published": true, "followup_at": "2026-07-06", "announcement_still_online": null }, "source_urls": [ "https://internet.watch.impress.co.jp/docs/news/2122740.html", "https://k-tai.watch.impress.co.jp/docs/news/2122837.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "再発防止策: 全サーバーへEDR導入（6/21）、第三者機関フォレンジック。パスワード強制リセット実施。総務省が7月に行政指導。", "source_kind": [ "press", "press" ] }, { "incident_id": "monogatari-2026-10-05", "version": 1, "org_name": "株式会社物語コーポレーション", "org_corporate_number": null, "org_listed": true, "org_sector": "飲食", "service_names": [ "焼肉きんぐ 公式アプリ" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-02", "published_at": "2026-10-05", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 10788963, "affected_scope": "焼肉きんぐ公式アプリの登録ユーザー（登録1080万8784件のうち1078万8963件）", "leaked_fields": [ "name", "email", "phone", "other" ], "response": { "days_detect_to_publish": 3, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": false, "ppc_reported": true, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://www.sbbit.jp/article/cont1/187306" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.55, "notes": "会員番号も流出。パスワード・生年月日・決済情報は対象外と説明。", "source_kind": [ "press" ] }, { "incident_id": "times-mobility-2026-09-25", "version": 1, "org_name": "タイムズモビリティ株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "その他", "service_names": [ "タイムズカー", "タイムズビジネスサービス" ], "via_vendor": null, "occurred_from": null, "occurred_to": "2026-09-26", "detected_at": "2026-09-25", "published_at": "2026-09-25", "status": "possibility", "cause": "unauthorized_access", "affected_count": null, "affected_scope": "タイムズカー会員・退会者（入会未完了含む）、タイムズビジネスサービス会員・退会者", "leaked_fields": [ "name", "address", "birth", "phone", "email", "id_document", "login_id" ], "response": { "days_detect_to_publish": 0, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": false, "ppc_reported": true, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-09-28", "announcement_still_online": true }, "source_urls": [ "https://www.park24.co.jp/news/2026/09/web1.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "初報。親会社パーク24名義。", "source_kind": [ "official" ] }, { "incident_id": "times-mobility-2026-09-25", "version": 2, "org_name": "タイムズモビリティ株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "その他", "service_names": [ "タイムズカー", "タイムズビジネスサービス" ], "via_vendor": null, "occurred_from": null, "occurred_to": "2026-09-26", "detected_at": "2026-09-25", "published_at": "2026-09-28", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 6600000, "affected_scope": "タイムズカー会員・退会者（入会未完了含む）、タイムズビジネスサービス会員・退会者。約660万アカウント", "leaked_fields": [ "name", "address", "birth", "phone", "email", "id_document", "login_id" ], "response": { "days_detect_to_publish": 0, "notified_individually": "yes", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": false, "ppc_reported": true, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-09-28", "announcement_still_online": true }, "source_urls": [ "https://www.park24.co.jp/news/2026/09/20260928-1.html", "https://atmarkit.itmedia.co.jp/ait/articles/2609/30/news038.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.85, "notes": "公式第2報から抽出。専用窓口0120-25-8924（24h）。個別案内を順次実施と明記、手段は未記載。パスワードは不可逆形式。カード情報は対象外。再発防止策は続報で公表予定。", "source_kind": [ "official", "press" ] }, { "incident_id": "2rinkan-2026-04-23", "version": 1, "org_name": "株式会社2りんかんイエローハット", "org_corporate_number": null, "org_listed": false, "org_sector": "小売", "service_names": [ "2りんかんアプリ" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-04-23", "status": "possibility", "cause": "unauthorized_access", "affected_count": null, "affected_scope": "2りんかんアプリの会員（会員専用サーバーへの侵入）", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-06-19", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/05/12/55244.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "4/21に「システム不具合」としてアプリ停止を告知、4/23に漏えいの可能性を公表。親会社イエローハットは上場。", "source_kind": [ "press" ] }, { "incident_id": "2rinkan-2026-04-23", "version": 2, "org_name": "株式会社2りんかんイエローハット", "org_corporate_number": null, "org_listed": false, "org_sector": "小売", "service_names": [ "2りんかんアプリ" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-06-19", "status": "closed", "cause": "unauthorized_access", "affected_count": 3100000, "affected_scope": "2りんかんアプリの会員 約310万名", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-06-19", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/01/55609.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "最終報（第三報）。漏れた項目は二次記事に記載なし。外部専門家による調査とシステム再構築に言及。", "source_kind": [ "press" ] }, { "incident_id": "ielove-2026-04-08", "version": 1, "org_name": "株式会社いえらぶGROUP", "org_corporate_number": null, "org_listed": false, "org_sector": "不動産", "service_names": [ "いえらぶCLOUD" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-04-06", "published_at": "2026-04-08", "status": "confirmed", "cause": "unauthorized_access", "affected_count": null, "affected_scope": "いえらぶCLOUDを利用する不動産会社が保管していた社外関係者等（問い合わせ者等）の情報", "leaked_fields": [], "response": { "days_detect_to_publish": 2, "notified_individually": "no", "notification_channel": [ "web_only" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": true, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-04-27", "announcement_still_online": null }, "source_urls": [ "https://www.ielove-group.jp/news/detail-1371", "https://scan.netsecurity.ne.jp/article/2026/04/27/55153.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "B2B SaaS起点の連鎖事案。下流にLIFULL HOME'S、SUUMO等の問い合わせ情報。窓口 050-5794-1573（平日）。", "source_kind": [ "official", "press" ] }, { "incident_id": "lifull-2026-04-22", "version": 1, "org_name": "株式会社LIFULL", "org_corporate_number": null, "org_listed": true, "org_sector": "不動産", "service_names": [ "LIFULL HOME'S" ], "via_vendor": "いえらぶCLOUD（株式会社いえらぶGROUP）", "occurred_from": null, "occurred_to": "2026-04-08", "detected_at": null, "published_at": "2026-04-22", "status": "possibility", "cause": "vendor_breach", "affected_count": null, "affected_scope": "LIFULL HOME'Sから不動産会社へ問い合わせたユーザーのうち、当該不動産会社がいえらぶCLOUDに保管していた情報の本人", "leaked_fields": [ "name", "phone", "email", "other" ], "response": { "days_detect_to_publish": null, "notified_individually": "no", "notification_channel": [ "web_only" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": false, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-04-22", "announcement_still_online": null }, "source_urls": [ "https://lifull.com/news/48473/", "https://rocket-boys.co.jp/?p=32507" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "4/9にSNS指摘への告知、4/22が続報。個別通知・窓口はいえらぶ側に委ねている。委託先連鎖の典型例。", "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-17", "affected_count": 3709551, "affected_scope": "カーセンサーnet問い合わせ利用者321万421件、口コミ投稿者5289件、C-MATCH登録販売店48万3168件、従業員・委託先等1万673件", "leaked_fields": [ "name", "address", "phone", "email", "login_id", "bank_account", "other" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "公式リリースはfetch拒否、Car Watch経由。引落口座は販売店（個人事業主）分。決済情報・パスワードは対象外と説明。日産・三菱自の中古車サイトも停止（経由連鎖）。", "version": 1, "incident_id": "recruit-carsensor-2026-10-21", "org_name": "株式会社リクルート", "org_sector": "その他", "service_names": [ "カーセンサーnet", "C-MATCH" ], "published_at": "2026-10-21", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://www.recruit.co.jp/newsroom/pressrelease/2026/1021_149447.html", "https://car.watch.impress.co.jp/docs/news/2150016.html" ], "response": { "days_detect_to_publish": 4, "notified_individually": "yes", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": false, "ppc_reported": true, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-08-18", "affected_count": 1801499, "affected_scope": "イエローハット会員（最大）", "leaked_fields": [ "name", "address", "birth", "gender", "phone", "email", "login_id", "password" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "子会社2りんかん（4月）とは別事案。専用窓口0120-405-092。パスワードは復元不能形式。公式ページはfetch拒否。", "version": 1, "incident_id": "yellowhat-2026-08-28", "org_name": "株式会社イエローハット", "org_sector": "小売", "service_names": [ "イエローハット WEB作業予約" ], "published_at": "2026-08-28", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://www.yellowhat.jp/information/yellowhat/202608.html", "https://www.issoh.co.jp/tech/details/17203/" ], "response": { "days_detect_to_publish": 10, "notified_individually": "yes", "notification_channel": [ "email", "phone", "postal" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": true, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-15", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-08-18", "affected_count": 1797124, "affected_scope": "イエローハット会員 1,797,124名（確定）", "leaked_fields": [ "name", "address", "birth", "gender", "phone", "email", "login_id", "password" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第二報（適時開示）。通知・謝罪完了と記載。PPCへ確報提出。", "version": 2, "incident_id": "yellowhat-2026-08-28", "org_name": "株式会社イエローハット", "org_sector": "小売", "service_names": [ "イエローハット WEB作業予約" ], "published_at": "2026-10-15", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://www.issoh.co.jp/tech/details/17203/" ], "response": { "days_detect_to_publish": 10, "notified_individually": "yes", "notification_channel": [ "email", "phone", "postal" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": true, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-15", "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-04-27", "occurred_to": null, "detected_at": "2026-05-26", "affected_count": 10900000, "affected_scope": "バックアップ用外部記憶媒体に保存されていた需要者 最大1,090万口", "leaked_fields": [ "name", "address", "phone", "other" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.85, "notes": "媒体の所在不明。使用電力量データ・小売電気事業者名を含む。口座・カードは含まず。個別通知は予定のみで手段未記載。施錠なしキャビネット保管。", "version": 1, "incident_id": "kyuden-td-2026-06-08", "org_name": "九州電力送配電株式会社", "org_sector": "その他", "service_names": [ "九州電力 電気契約（送配電）" ], "published_at": "2026-06-08", "status": "possibility", "cause": "lost_device", "source_urls": [ "https://www.kyuden.co.jp/td/press/2026/260608.html", "https://atmarkit.itmedia.co.jp/ait/articles/2606/10/news045.html" ], "response": { "days_detect_to_publish": 13, "notified_individually": "yes", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": false, "ppc_reported": true, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-05-21", "occurred_to": "2026-08-01", "detected_at": null, "affected_count": 8853839, "affected_scope": "ショップサーブ出店店舗の購入者・会員（メルマガ会員含む）・カード関係者、および出店者。同一顧客の重複を含む件数", "leaked_fields": [ "name", "address", "phone", "email", "login_id", "password", "card_number", "bank_account", "other" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.8, "notes": "初報8/1、第2報8/2、最終報10/16。カードは先頭6桁+下4桁+有効期限。利用者からは出店者名でしか見えないため、ドメイン照合が効かない典型例（キングジム等が個別公表）。BASE子会社。", "version": 2, "incident_id": "estore-2026-08-01", "org_name": "株式会社Eストアー", "org_sector": "その他", "service_names": [ "ショップサーブ（出店ECサイト）" ], "published_at": "2026-08-02", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://estore.jp/press/20260802/", "https://atmarkit.itmedia.co.jp/ait/articles/2608/05/news066.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-16", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-08-09", "affected_count": 583, "affected_scope": "さくらのレンタルサーバ 一部顧客環境", "leaked_fields": [ "other" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "初報。", "version": 1, "incident_id": "sakura-2026-08-17", "org_name": "さくらインターネット株式会社", "org_sector": "通信", "service_names": [ "さくらのレンタルサーバ" ], "published_at": "2026-08-17", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://atmarkit.itmedia.co.jp/ait/articles/2608/20/news036.html" ], "response": { "days_detect_to_publish": 8, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-08-19", "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-08-09", "affected_count": 1360563, "affected_scope": "販売管理システム上の会員情報 最大1,360,563アカウント", "leaked_fields": [ "login_id", "name", "address", "phone", "email", "password", "other" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第二報。外部持ち出しは未確認。", "version": 2, "incident_id": "sakura-2026-08-17", "org_name": "さくらインターネット株式会社", "org_sector": "通信", "service_names": [ "さくらのレンタルサーバ", "さくらのVPS", "さくらインターネット 会員情報" ], "published_at": "2026-08-19", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://www.sakura.ad.jp/corporate/information/newsreleases/2026/08/19/1968225633/", "https://atmarkit.itmedia.co.jp/ait/articles/2608/20/news036.html" ], "response": { "days_detect_to_publish": 8, "notified_individually": "yes", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-09-10", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": "2023-04-01", "occurred_to": "2026-03-31", "detected_at": "2026-08-09", "affected_count": 1360563, "affected_scope": "閲覧・取得の可能性があるアカウント 1,360,563（うちレンタルサーバ951）。実際の取得は未確定", "leaked_fields": [ "login_id", "name", "address", "phone", "email", "birth", "gender", "password", "other" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.9, "notes": "第三報（公式）。原因: 初期パスワードの平文保存、ログ管理不備。専用窓口0120-378-719。再発防止12項目（EDR拡大、全サーバ再構築、外部監査等）。個別案内困難な場合は公表で代替。", "version": 3, "incident_id": "sakura-2026-08-17", "org_name": "さくらインターネット株式会社", "org_sector": "通信", "service_names": [ "さくらのレンタルサーバ", "さくらのVPS", "さくらインターネット 会員情報" ], "published_at": "2026-09-10", "status": "closed", "cause": "unauthorized_access", "source_urls": [ "https://www.sakura.ad.jp/corporate/information/newsreleases/2026/09/10/1968225692/", "https://atmarkit.itmedia.co.jp/ait/articles/2609/11/news039.html" ], "response": { "days_detect_to_publish": 8, "notified_individually": "yes", "notification_channel": [ "email" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": false, "ppc_reported": null, "inquiry_desk": true, "countermeasures_specific": true, "followup_published": true, "followup_at": "2026-09-10", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "affected_count": null, "affected_scope": "カリテコ入会申込書記載の現会員・退会済み会員", "leaked_fields": [ "name", "address", "birth", "phone", "email", "id_document", "card_number" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.8, "notes": "初報7/2はシステム障害として公表。カード情報は一部の顧客で含まれる可能性。専用窓口0120-353-276。宛先不明で届かない通知はサイト掲載で代替。", "version": 2, "incident_id": "meitetsu-kyosho-2026-07-02", "org_name": "名鉄協商株式会社", "org_sector": "その他", "service_names": [ "カリテコ（カーシェア）" ], "published_at": "2026-08-04", "status": "possibility", "cause": "ransomware", "source_urls": [ "https://www.cariteco.com/news/2026_08_04_17289", "https://scan.netsecurity.ne.jp/article/2026/08/26/56030.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "yes", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-09-03", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": "2022-05-25", "occurred_to": "2026-04-03", "detected_at": null, "affected_count": 8030000, "affected_scope": "対象ゲームのユーザーと未登録ゲスト 803万件（国内約752万件）", "leaked_fields": [ "other" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "不正アクセスではなく内部識別子の不要な外部送信（パートナー企業へ）。氏名等は含まず。総務省が7/31に行政指導（電気通信事業法 外部送信規律）。3年10か月気づかず。", "version": 1, "incident_id": "lycorp-linegame-2026-07-13", "org_name": "LINEヤフー株式会社", "org_sector": "通信", "service_names": [ "LINE GAME（LINE ポコポコ / ポコパンタウン / ポコパン）" ], "published_at": "2026-07-13", "status": "confirmed", "cause": "other", "source_urls": [ "https://www.lycorp.co.jp/ja/privacy-security/announcement/020632/", "https://internet.watch.impress.co.jp/docs/news/2130148.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": "2025-10-19", "occurred_to": null, "detected_at": null, "affected_count": 739700, "affected_scope": "事業所向け約59万件、個人向け約13.2万件、取引先約1.5万件、役員・社員等約2,700件", "leaked_fields": [ "other" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "10/19発生、12/12に調査報告。原因は委託先管理者アカウント（MFA例外）の不正利用。新環境をゼロから構築。身代金交渉なし。", "version": 1, "incident_id": "askul-2025-10-19", "org_name": "アスクル株式会社", "org_sector": "小売", "service_names": [ "ASKUL", "LOHACO", "ソロエルアリーナ" ], "published_at": "2025-12-12", "status": "confirmed", "cause": "ransomware", "source_urls": [ "https://www.watch.impress.co.jp/docs/news/2070955.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": true, "followup_published": true, "followup_at": "2026-08-17", "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": "2025-10-19", "occurred_to": null, "detected_at": null, "affected_count": 1339700, "affected_scope": "合計133万9700件（12月公表の約74万件に加え約60万件を追加特定）", "leaked_fields": [ "other" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.4, "notes": "追加特定の続報。公表日はScan記事日付から推定（要確認）。", "version": 2, "incident_id": "askul-2025-10-19", "org_name": "アスクル株式会社", "org_sector": "小売", "service_names": [ "ASKUL", "LOHACO", "ソロエルアリーナ" ], "published_at": "2026-08-17", "status": "confirmed", "cause": "ransomware", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/25/56306.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": true, "followup_published": true, "followup_at": "2026-08-17", "announcement_still_online": null }, "source_kind": [ "press" ] }, { "incident_id": "aflac-2026-07-01", "version": 1, "org_name": "アフラック生命保険株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "金融", "service_names": [ "アフラック 保険契約" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-07-01", "status": "possibility", "cause": "unauthorized_access", "affected_count": 4420000, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/01/55610.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】短時間大量照会の制御不備。", "source_kind": [ "press" ] }, { "incident_id": "murata-2026-03-19", "version": 1, "org_name": "株式会社村田製作所", "org_corporate_number": null, "org_listed": null, "org_sector": "製造", "service_names": [ "村田製作所 IT環境" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-03-19", "status": "possibility", "cause": "unauthorized_access", "affected_count": null, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/03/19/54871.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】3月・4月・7月と続報。自動車保険の顧客情報含む。", "source_kind": [ "press" ] }, { "incident_id": "moneyforward-2026-05-08", "version": 1, "org_name": "株式会社マネーフォワード", "org_corporate_number": null, "org_listed": null, "org_sector": "金融", "service_names": [ "マネーフォワード" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-05-08", "status": "possibility", "cause": "unauthorized_access", "affected_count": null, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/05/08/55222.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】GitHub上の認証情報・リポジトリ。7月に個人データへの影響を公表。", "source_kind": [ "press" ] }, { "incident_id": "umg-2026-05-21", "version": 1, "org_name": "ユニバーサル ミュージック合同会社", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "ユニバーサル ミュージック ECサイト" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-05-21", "status": "possibility", "cause": "unauthorized_access", "affected_count": 3105585, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/05/21/55325.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "medica-2026-04-30", "version": 1, "org_name": "株式会社メディカ出版", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "メディカ出版（医療者向け書籍・通販）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-04-30", "status": "possibility", "cause": "ransomware", "affected_count": 772000, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/04/30/55173.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】委託元として東京医療保健大学等が個別公表（連鎖）。", "source_kind": [ "press" ] }, { "incident_id": "enesance-2026-05-22", "version": 1, "org_name": "エネサンスホールディングス株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "エネサンス（LPガス等）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-05-22", "status": "possibility", "cause": "ransomware", "affected_count": 367000, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/05/22/55331.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "tmp-james-2026-05-19", "version": 1, "org_name": "トヨタモビリティパーツ株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "ジェームス 会員" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-05-19", "status": "possibility", "cause": "unauthorized_access", "affected_count": null, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/05/19/55298.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "ckc-2026-06-22", "version": 1, "org_name": "CKCネットワーク株式会社 / 学参", "org_corporate_number": null, "org_listed": null, "org_sector": "教育", "service_names": [ "学参 学習塾・通信教育" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-06-22", "status": "possibility", "cause": "ransomware", "affected_count": 717000, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/06/22/55540.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "wave-2026-04-20", "version": 1, "org_name": "株式会社ウエーブ", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "ウエーブ（印刷通販）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-04-20", "status": "possibility", "cause": "unauthorized_access", "affected_count": 176810, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/04/20/55094.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "mynavi-2026-04-16", "version": 1, "org_name": "株式会社マイナビ", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "マイナビ" ], "via_vendor": "クラウドサービス（名称未確認）", "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-04-16", "status": "possibility", "cause": "unauthorized_access", "affected_count": 111505, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/04/16/55073.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】利用クラウドサービス経由。", "source_kind": [ "press" ] }, { "incident_id": "tokyu-resorts-2026-04-16", "version": 1, "org_name": "東急リゾーツ＆ステイ株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "東急リゾーツ＆ステイ（ホテル・会員）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-04-16", "status": "possibility", "cause": "mis_send", "affected_count": 95986, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/04/16/55076.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】顧客情報CSVの誤送信。", "source_kind": [ "press" ] }, { "incident_id": "anabuki-2026-03-16", "version": 1, "org_name": "穴吹ハウジングサービス株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "不動産", "service_names": [ "穴吹ハウジングサービス（マンション管理）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-03-16", "status": "possibility", "cause": "ransomware", "affected_count": 496000, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/03/16/54843.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "tokai-univ-2026-03-06", "version": 1, "org_name": "東海大学（委託先: 東海ソフト開発）", "org_corporate_number": null, "org_listed": null, "org_sector": "教育", "service_names": [ "東海大学" ], "via_vendor": "東海ソフト開発", "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-03-06", "status": "possibility", "cause": "ransomware", "affected_count": 193118, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/03/06/54778.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "nms-musashikosugi-2026-03-09", "version": 1, "org_name": "日本医科大学武蔵小杉病院", "org_corporate_number": null, "org_listed": null, "org_sector": "医療", "service_names": [ "日本医科大学武蔵小杉病院 患者情報" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-03-09", "status": "possibility", "cause": "ransomware", "affected_count": 131700, "affected_scope": null, "leaked_fields": [ "health" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/03/09/54788.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "smaregi-2026-01-28", "version": 1, "org_name": "株式会社スマレジ（外部アプリ「書類上手」）", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "スマレジ・アプリマーケット 外部アプリ" ], "via_vendor": "外部アプリ 書類上手/見積・請求書", "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-01-28", "status": "possibility", "cause": "unauthorized_access", "affected_count": 136346, "affected_scope": null, "leaked_fields": [ "name", "phone" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/01/28/54498.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】店舗側の顧客情報。ノースバイシクル北海道等が個別公表（連鎖）。", "source_kind": [ "press" ] }, { "incident_id": "tokai-comm-2026-01-30", "version": 1, "org_name": "株式会社TOKAIコミュニケーションズ", "org_corporate_number": null, "org_listed": null, "org_sector": "通信", "service_names": [ "OneOffice Mail Solution" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-01-30", "status": "possibility", "cause": "unauthorized_access", "affected_count": 81651, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/01/30/54520.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "justcurtain-2026-02-13", "version": 1, "org_name": "ジャストカーテン", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "ジャストカーテン オンラインショップ" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-02-13", "status": "possibility", "cause": "unauthorized_access", "affected_count": 71086, "affected_scope": null, "leaked_fields": [ "card_number" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/02/13/54616.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】カード情報は10,423名。", "source_kind": [ "press" ] }, { "incident_id": "bandai-channel-2026-01", "version": 1, "org_name": "株式会社バンダイナムコフィルムワークス", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "バンダイチャンネル" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-01-31", "status": "possibility", "cause": "unauthorized_access", "affected_count": 1366000, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/02/26/54712.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】公表日は1月中（日付未確認）。", "source_kind": [ "press" ] }, { "incident_id": "sagahirakawaya-2026-06", "version": 1, "org_name": "佐嘉平川屋", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "佐嘉平川屋 オンラインショップ" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-06-26", "status": "possibility", "cause": "unauthorized_access", "affected_count": 5783, "affected_scope": null, "leaked_fields": [ "card_number" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/06/26/55581.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】カード不正利用で逮捕者。", "source_kind": [ "press" ] }, { "incident_id": "bonform-2026-05-15", "version": 1, "org_name": "ボンフォーム", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "ボンフォーム オンラインストア" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-05-15", "status": "possibility", "cause": "unauthorized_access", "affected_count": 3268, "affected_scope": null, "leaked_fields": [ "card_number" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/05/15/55275.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】", "source_kind": [ "press" ] }, { "incident_id": "storeacademy-2026-02-03", "version": 1, "org_name": "ストリートアカデミー株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "ストアカ" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-02-03", "status": "possibility", "cause": "other", "affected_count": null, "affected_scope": null, "leaked_fields": [ "card_number" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/02/03/54540.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】第三者による不正利用を確認。後の調査で侵害は確認されず。", "source_kind": [ "press" ] }, { "incident_id": "inkkakumei-2026-08-18", "version": 1, "org_name": "株式会社シー・コネクト", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "インク革命" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-08-18", "status": "possibility", "cause": "unauthorized_access", "affected_count": 24166, "affected_scope": null, "leaked_fields": [ "card_number" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/25/56306.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】対象期間2025-04-08〜2025-12-10。", "source_kind": [ "press" ] }, { "incident_id": "nihon-telenet-2026-07-27", "version": 1, "org_name": "日本テレネット株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "日本テレネット（受託業務）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-07-27", "status": "possibility", "cause": "ransomware", "affected_count": 1041044, "affected_scope": null, "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/25/56306.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.3, "notes": "【未精査: 月次総括の見出しレベル】外部転送の証拠なし。B2B受託のため委託元が個別公表の可能性。", "source_kind": [ "press" ] }, { "incident_id": "trustbank-2026-10-20", "version": 1, "org_name": "株式会社トラストバンク", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "ふるさとチョイス" ], "via_vendor": null, "occurred_from": "2026-10-17", "occurred_to": null, "detected_at": "2026-10-19", "published_at": "2026-10-20", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 4454097, "affected_scope": "「ふるさとチョイス」会員情報 4,454,097件（氏名、メールアドレス、住所、電話番号、ハッシュ化されたパスワード、寄附控除試算額）", "leaked_fields": [ "name", "email", "address", "phone", "password", "other" ], "response": { "days_detect_to_publish": 1, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/22/56543.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "10/19 15:50に関連サービス停止。パスワードはハッシュ化。再発防止は「強化」表現のみ。", "source_kind": [ "press" ] }, { "incident_id": "yumirlink-2026-10-19", "version": 1, "org_name": "ユミルリンク株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "ユミルリンク メール配信サービス" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-16", "published_at": "2026-10-19", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 9000000, "affected_scope": "同社メール配信サービスの5システムからメールアドレスを含む情報 延べ約900万件が出力されたと試算（詳細は調査中）", "leaked_fields": [ "email", "other" ], "response": { "days_detect_to_publish": 3, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/22/56541.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "件数は延べ件数（人数ではない）。プログラム脆弱性でサポート担当者の認証情報を取得され不正プログラム設置・DB出力。第一報。B2B配信基盤のため影響する送信元企業は本文に記載なし。", "source_kind": [ "press" ] }, { "incident_id": "starts-ozmall-2026-09-27", "version": 1, "org_name": "スターツ出版株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "オズモール（OZmall）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-09-26", "published_at": "2026-09-27", "status": "possibility", "cause": "unauthorized_access", "affected_count": 447610, "affected_scope": "オズモール会員のメールアドレス 最大447,610名分", "leaked_fields": [ "email" ], "response": { "days_detect_to_publish": 1, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-10-01", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/01/56359.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "海外からの大量不正アクセスをシステム部門が検知。本文は冒頭のみ（有料部分未取得）。", "source_kind": [ "press" ] }, { "incident_id": "starts-ozmall-2026-09-27", "version": 2, "org_name": "スターツ出版株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "オズモール（OZmall）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-09-26", "published_at": "2026-10-01", "status": "possibility", "cause": "unauthorized_access", "affected_count": 442779, "affected_scope": "オズモール会員および一部の退会者 最大442,779名分のメールアドレスと一部の氏名および住所（都道府県まで）", "leaked_fields": [ "email", "name", "address" ], "response": { "days_detect_to_publish": 1, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-10-01", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/21/56525.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第2報。件数を447,610→442,779に修正、退会者を含むことを追記。", "source_kind": [ "press" ] }, { "incident_id": "sourcenext-2026-10-15", "version": 1, "org_name": "ソースネクスト株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "小売", "service_names": [ "ソースネクスト 会員（sourcenext.com）" ], "via_vendor": null, "occurred_from": "2026-10-09", "occurred_to": "2026-10-13", "detected_at": "2026-10-13", "published_at": "2026-10-15", "status": "possibility", "cause": "unauthorized_access", "affected_count": 22519960, "affected_scope": "同社に登録のあった顧客の会員情報 22,519,960件（会員情報取得APIを不正利用し取得）", "leaked_fields": [], "response": { "days_detect_to_publish": 2, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/20/56515.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "10/9 10時頃から不正アクセス、10/13 9時頃確認、同日13:36に封じ込め完了。漏えい項目は本文冒頭に記載なし。", "source_kind": [ "press" ] }, { "incident_id": "nikkei-2026-10-16", "version": 1, "org_name": "株式会社日本経済新聞社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "日本経済新聞社 各種サービス（クラウド上保管データ）" ], "via_vendor": null, "occurred_from": "2026-10-07", "occurred_to": "2026-10-07", "detected_at": null, "published_at": "2026-10-16", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 1830000, "affected_scope": "約183万件。氏名・メールアドレス・住所・電話番号・生年月日のいずれかを含むものが約15万件（うちメールアドレス含む約12万件）、単体で個人特定できない識別子のみが約168万件", "leaked_fields": [ "name", "email", "address", "phone", "birth", "other" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/20/56513.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "システム開発用クラウドサービスの認証情報が窃取され不正アクセス。関連記事に日経ナショナル ジオグラフィック利用者も対象との続報あり。", "source_kind": [ "press" ] }, { "incident_id": "gplan-2026-09-30", "version": 1, "org_name": "ジー・プラン株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "Gポイント" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-09-25", "published_at": "2026-09-30", "status": "possibility", "cause": "unauthorized_access", "affected_count": 70000, "affected_scope": "「Gポイント」会員識別子 最大約7万件", "leaked_fields": [ "other" ], "response": { "days_detect_to_publish": 5, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/20/56506.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "9/25にシステム異常を検知し調査。漏えいの可能性があるのは会員識別子のみ。", "source_kind": [ "press" ] }, { "incident_id": "bk-japan-2026-10-15", "version": 1, "org_name": "株式会社ビーケー・ジャパン", "org_corporate_number": null, "org_listed": null, "org_sector": "飲食", "service_names": [ "バーガーキング公式アプリ" ], "via_vendor": null, "occurred_from": "2026-10-02", "occurred_to": "2026-10-07", "detected_at": "2026-10-13", "published_at": "2026-10-15", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 11180000, "affected_scope": "バーガーキング公式アプリ会員情報 約1,118万件（会員ID、メールアドレス、登録種別、都道府県、性別、生年月日、氏名（漢字・カナ）、電話番号、モバイルオーダー履歴の有無、メールアドレス認証の有無）", "leaked_fields": [ "login_id", "email", "address", "gender", "birth", "name", "phone", "other" ], "response": { "days_detect_to_publish": 2, "notified_individually": "yes", "notification_channel": [ "email" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/19/56498.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "対象顧客へメールで案内中。通信元からのアクセス遮断。再発防止は「強化」表現。2024年10月にも同アプリで漏えい。", "source_kind": [ "press" ] }, { "incident_id": "toppan-2026-09-29", "version": 1, "org_name": "TOPPAN株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "その他", "service_names": [ "保険料控除証明書 発行サービス（損害保険ジャパン契約者）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-09-29", "status": "confirmed", "cause": "mis_send", "affected_count": 177426, "affected_scope": "損害保険ジャパン株式会社の契約者情報 177,426名分を他の損害保険会社に誤送付", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/16/56480.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "日本損害保険協会所属の損保各社からの受託業務。公式発表は文字コピー不可PDF。漏えい項目は本文に記載なし。", "source_kind": [ "press" ] }, { "incident_id": "dip-2026-10-09", "version": 1, "org_name": "ディップ株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "その他", "service_names": [ "バイトル", "バイトルNEXT" ], "via_vendor": null, "occurred_from": "2026-10-06", "occurred_to": null, "detected_at": null, "published_at": "2026-10-09", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 3885771, "affected_scope": "「バイトル」「バイトルNEXT」会員登録者のうち最大3,885,771件のメールアドレス", "leaked_fields": [ "email" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/15/56464.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "システム一部機能の仕様不備を突いた海外からの不正アクセス。", "source_kind": [ "press" ] }, { "incident_id": "dai-ichi-life-2026-10-02", "version": 1, "org_name": "株式会社第一ライフグループ / 第一生命保険株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "金融", "service_names": [ "第一生命保険 人事システム（従業員・退職者）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-09-24", "published_at": "2026-10-02", "status": "possibility", "cause": "unauthorized_access", "affected_count": 120000, "affected_scope": "第一ライフグループおよび第一生命の従業員 約5万名（内勤約1.3万名、営業職員約3.7万名）と退職者 約7万名（内勤職員は1967年以降、営業職員は2017年以降）の計約12万名", "leaked_fields": [ "other", "name", "address", "phone", "gender" ], "response": { "days_detect_to_publish": 8, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/15/56463.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "従業員番号、氏名、住所、電話番号、性別、所属、職位、職務、管理職上司氏名。顧客情報ではなく従業員情報。", "source_kind": [ "press" ] }, { "incident_id": "fines-2026-09-25", "version": 1, "org_name": "株式会社ファインズ", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "ファインズ 予約システム" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-09-22", "published_at": "2026-09-25", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 1536322, "affected_scope": "同社提供の予約システムの予約者情報 1,536,322件", "leaked_fields": [], "response": { "days_detect_to_publish": 3, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/15/56459.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "速報。公式表題は「情報漏えいについてのお詫びとお知らせ【速報】」。本文は不正アクセス判明のみでstatusは暫定。弁護士と連携し調査中。", "source_kind": [ "press" ] }, { "incident_id": "daiichikosho-2026-10-08", "version": 1, "org_name": "株式会社第一興商", "org_corporate_number": null, "org_listed": true, "org_sector": "その他", "service_names": [ "第一興商 顧客情報（委託先NCG保有分）" ], "via_vendor": "日本コロムビアグループ株式会社（NCG社）", "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-05", "published_at": "2026-10-08", "status": "possibility", "cause": "vendor_breach", "affected_count": 8724000, "affected_scope": "委託先 日本コロムビアグループ株式会社（NCG社）従業員端末のマルウェア感染により約8,724,000件の情報が漏えいしたおそれを否定できず", "leaked_fields": [], "response": { "days_detect_to_publish": 3, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": true, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/14/56449.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "NCG社で10/1-10/2に端末1台の感染判明、10/2隔離、10/5に第一興商へ報告（detected_atは報告受領日）。フリーダイヤル窓口開設。", "source_kind": [ "press" ] }, { "incident_id": "bookoff-2026-10-09", "version": 1, "org_name": "ブックオフグループホールディングス株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "小売", "service_names": [ "ブックオフ 会員（子会社会員管理システム）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-06", "published_at": "2026-10-09", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 6430000, "affected_scope": "子会社の会員管理システムで管理する会員情報 最大約643万件", "leaked_fields": [], "response": { "days_detect_to_publish": 3, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/14/56446.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "会員情報が外部から取得されたことが判明。対象サービス名・項目は本文冒頭に記載なし。", "source_kind": [ "press" ] }, { "incident_id": "jgc-digital-2026-09-18", "version": 1, "org_name": "JGC Digital株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "JGC Digital 顧客情報（Metabase集計データ）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-09-16", "published_at": "2026-09-18", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 60000, "affected_scope": "BIツール「Metabase」の脆弱性を悪用した不正アクセスで一部の顧客情報 約6万件が取得された", "leaked_fields": [], "response": { "days_detect_to_publish": 2, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/09/56422.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "Metabase SQLインジェクション脆弱性（ゼロデイ）関連。", "source_kind": [ "press" ] }, { "incident_id": "citizen-2026-10-06", "version": 1, "org_name": "シチズン時計株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "製造", "service_names": [ "シチズン 問い合わせフォーム", "ブローバ 問い合わせフォーム", "フレデリック・コンスタント 問い合わせフォーム" ], "via_vendor": "株式会社スカラコミュニケーションズ", "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-10-06", "status": "possibility", "cause": "vendor_breach", "affected_count": 100000, "affected_scope": "シチズン、ブローバ、フレデリック・コンスタント各ブランドWebサイトの問い合わせフォーム利用者情報 約10万件", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/08/56412.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "委託先サーバへの不正アクセス。", "source_kind": [ "press" ] }, { "incident_id": "murauchi-2026-07-24", "version": 2, "org_name": "株式会社ムラウチドットコム", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "ムラウチドットコム" ], "via_vendor": null, "occurred_from": "2026-07-15", "occurred_to": null, "detected_at": "2026-07-16", "published_at": "2026-09-15", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 7716811, "affected_scope": "同社運用システム内の個人情報 7,716,811件", "leaked_fields": [], "response": { "days_detect_to_publish": 8, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-09-15", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/06/56391.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第二報。7/15未明に社内システム障害、7/16復旧作業中に不正アクセス痕跡確認、フォレンジック調査。第一報（7/24）はDB未収録。", "source_kind": [ "press" ] }, { "incident_id": "tokyometro-2026-09-27", "version": 1, "org_name": "東京地下鉄株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "その他", "service_names": [ "メトロポイントクラブ（メトポ）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-09-25", "published_at": "2026-09-27", "status": "possibility", "cause": "unauthorized_access", "affected_count": 59000, "affected_scope": "メトポ会員向けサービスのメールアドレス 約59,000件", "leaked_fields": [ "email" ], "response": { "days_detect_to_publish": 2, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/02/56374.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "9/20にメール配信サービス不具合、9/25に異常な利用記録発見、国外からと推測される不正アクセス判明。", "source_kind": [ "press" ] }, { "incident_id": "seicomart-2026-09-29", "version": 1, "org_name": "株式会社セイコーマート", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "セイコーマートアプリ" ], "via_vendor": null, "occurred_from": "2026-09-24", "occurred_to": null, "detected_at": "2026-09-28", "published_at": "2026-09-29", "status": "possibility", "cause": "unauthorized_access", "affected_count": 570000, "affected_scope": "「セイコーマートアプリ」会員情報 約57万アカウント", "leaked_fields": [], "response": { "days_detect_to_publish": 1, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/02/56373.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "9/24 22-23時に不正なクラブカード退会処理1件で発覚、9/28 17時過ぎに漏えい可能性判明。第二報が既に公表されている（日付不明）。", "source_kind": [ "press" ] }, { "incident_id": "fuso-dentsu-2026-07-22", "version": 2, "org_name": "扶桑電通株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "その他", "service_names": [ "扶桑電通（社外関係者との共有フォルダ）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-07-15", "published_at": "2026-09-10", "status": "possibility", "cause": "unauthorized_access", "affected_count": 26489, "affected_scope": "社外関係者との情報共有に利用していたクラウドストレージ共有フォルダ内の個人情報 26,489件", "leaked_fields": [], "response": { "days_detect_to_publish": 7, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-09-10", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/29/56329.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第2報。初報（7/22）はDB未収録。関連記事によれば委託元（北海道大雪山ゆきのみず 販売管理）にも影響。", "source_kind": [ "press" ] }, { "incident_id": "helpfeel-gyazo-2026-09-16", "version": 2, "org_name": "株式会社Helpfeel", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "Gyazo" ], "via_vendor": null, "occurred_from": "2026-09-11", "occurred_to": null, "detected_at": "2026-09-11", "published_at": "2026-09-25", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 23620000, "affected_scope": "「Gyazo」ユーザーに関するデータ 約2,362万件", "leaked_fields": [], "response": { "days_detect_to_publish": 5, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-09-25", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/28/56313.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第二報。画像アップロードサーバの脆弱性を悪用し任意コマンド実行。初報（9/16）はDB未収録。Helpfeel/Cosenseへの影響は別途公表。", "source_kind": [ "press" ] }, { "incident_id": "kyoto-sanga-2026-09-08", "version": 1, "org_name": "株式会社京都パープルサンガ", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "京都サンガF.C. ファンクラブ" ], "via_vendor": null, "occurred_from": "2026-09-02", "occurred_to": "2026-09-02", "detected_at": null, "published_at": "2026-09-08", "status": "confirmed", "cause": "mis_send", "affected_count": 15612, "affected_scope": "ファンクラブ会員情報 15,612件（取引先担当者11名へのメールにファイルを誤添付、2名が開封）", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/25/56301.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "9/2 11:15に誤送信。", "source_kind": [ "press" ] }, { "incident_id": "corona-2026-08-28", "version": 1, "org_name": "株式会社コロナ", "org_corporate_number": null, "org_listed": true, "org_sector": "製造", "service_names": [ "コロナ 製品施工情報（クラウドサービス）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-08-28", "status": "possibility", "cause": "unauthorized_access", "affected_count": 35000, "affected_scope": "施工情報を管理するクラウドサービス内の個人情報 最大35,000名分", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/17/56255.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "本文は冒頭のみ。", "source_kind": [ "press" ] }, { "incident_id": "digital-agency-2026-09-11", "version": 1, "org_name": "デジタル庁", "org_corporate_number": null, "org_listed": null, "org_sector": "行政", "service_names": [ "ガバメントソリューションサービス（GSS）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-09-11", "status": "possibility", "cause": "unauthorized_access", "affected_count": 246000, "affected_scope": "GSS上で取り扱っていた職員等の個人情報を含むファイルの一部 約24.6万件", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/14/56223.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "VPNの脆弱性を利用した不正アクセス。Q&Aページも公開。", "source_kind": [ "press" ] }, { "incident_id": "logicvein-2025-12-08", "version": 4, "org_name": "株式会社ロジックベイン", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "ロジックベイン 製品・サービス関係者" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2025-12-08", "published_at": "2026-08-17", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 17559, "affected_scope": "ダークウェブへの17,559名の情報流出を確認", "leaked_fields": [], "response": { "days_detect_to_publish": 0, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-08-17", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/07/56145.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第4報。2026/2/27に第3報・最終報告を公表済みだったが、その後ダークウェブ流出を確認。第1〜3報はDB未収録。", "source_kind": [ "press" ] }, { "incident_id": "mitsui-fudosan-2026-09-01", "version": 1, "org_name": "三井不動産株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "不動産", "service_names": [ "三井不動産グループ 一部システム" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-08-28", "published_at": "2026-09-01", "status": "possibility", "cause": "unauthorized_access", "affected_count": 55000, "affected_scope": "同社グループが利用する一部システムの情報 最大5.5万件", "leaked_fields": [], "response": { "days_detect_to_publish": 4, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/09/07/56140.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "資格情報（認証情報）の不正利用による閲覧被害。", "source_kind": [ "press" ] }, { "incident_id": "rakuten-books-network-2026-08-21", "version": 1, "org_name": "楽天ブックスネットワーク株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "小売", "service_names": [ "楽天ブックス" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-08-21", "status": "possibility", "cause": "unauthorized_access", "affected_count": 33333, "affected_scope": "不正アクセスを受けたPC端末に保存されていた「楽天ブックス」利用者 33,333件の個人情報等", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/08/25/56015.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "PC端末への不正アクセス。漏えい確認の記載は本文冒頭になし。", "source_kind": [ "press" ] }, { "incident_id": "kaga-solnet-2026-07-01", "version": 1, "org_name": "加賀ソルネット株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "小売", "service_names": [ "アカデミコナビ" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-06-22", "published_at": "2026-07-01", "status": "possibility", "cause": "unauthorized_access", "affected_count": 170000, "affected_scope": "「アカデミコナビ」ユーザー登録情報 最大約17万件", "leaked_fields": [], "response": { "days_detect_to_publish": 9, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-08-17", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/13/55685.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "京都芸術大学などがPC斡旋販売で利用するサイト。", "source_kind": [ "press" ] }, { "incident_id": "kaga-solnet-2026-07-01", "version": 2, "org_name": "加賀ソルネット株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "小売", "service_names": [ "アカデミコナビ" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-06-22", "published_at": "2026-08-17", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 165587, "affected_scope": "2021年10月から2026年4月の間に「アカデミコナビ」で購入時にユーザー登録した顧客 合計165,587名分（氏名、住所、連絡先、メールアドレス、暗号化されたマイページパスワード等）", "leaked_fields": [ "name", "address", "email", "password", "other" ], "response": { "days_detect_to_publish": 9, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-08-17", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/08/24/56001.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第二報。漏えいを確認。パスワードは暗号化。", "source_kind": [ "press" ] }, { "incident_id": "innovation-2026-08-04", "version": 2, "org_name": "株式会社イノベーション", "org_corporate_number": null, "org_listed": true, "org_sector": "その他", "service_names": [ "イノベーション グループ サービス顧客" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-08-07", "status": "closed", "cause": "unauthorized_access", "affected_count": 62691, "affected_scope": "顧客情報 62,691名分", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-08-07", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/08/20/55975.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "確定報。GitHub認証情報の漏えいによる不正アクセス。速報（8/4）はDB未収録。", "source_kind": [ "press" ] }, { "incident_id": "recrie-tabiq-2026-06-30", "version": 1, "org_name": "株式会社リクリエ", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "Tabiq（電子チェックイン）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-05-13", "published_at": "2026-06-30", "status": "possibility", "cause": "misconfiguration", "affected_count": 1060338, "affected_scope": "「Tabiq」利用者 1,060,338人分の本人確認書類画像等（Amazon S3設定不備で外部からアクセス可能な状態）", "leaked_fields": [ "id_document" ], "response": { "days_detect_to_publish": 48, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/14/55694.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "宿泊施設向け電子チェックインシステム。発覚から公表まで48日。", "source_kind": [ "press" ] }, { "incident_id": "nifty-2026-06-23", "version": 2, "org_name": "ニフティ株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "通信", "service_names": [ "@niftyメール" ], "via_vendor": "KDDI ISP向けメール基盤", "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-07-06", "status": "confirmed", "cause": "vendor_breach", "affected_count": 2248708, "affected_scope": "「＠nifty」メールサービス利用者のメールアドレス 2,248,708名分", "leaked_fields": [ "email" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-07-06", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/08/55658.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第二報。kddi-2026-06-23の下流。KDDIが導入した第三者製ソフトウェアの脆弱性。第一報（6/23）はDB未収録。", "source_kind": [ "press" ] }, { "incident_id": "kddi-web-cpi-2026-06-23", "version": 2, "org_name": "株式会社KDDIウェブコミュニケーションズ", "org_corporate_number": null, "org_listed": null, "org_sector": "通信", "service_names": [ "CPI レンタルサーバー メール" ], "via_vendor": "KDDI ISP向けメール基盤", "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-07-06", "status": "confirmed", "cause": "vendor_breach", "affected_count": 1250543, "affected_scope": "レンタルサーバ「CPI」利用顧客向けメールサービスのメールアドレス 1,250,543名分", "leaked_fields": [ "email" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-07-06", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/08/55660.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "続報。kddi-2026-06-23の下流。第一報（6/23）はDB未収録。", "source_kind": [ "press" ] }, { "incident_id": "stnet-mail-2026-06-23", "version": 2, "org_name": "株式会社STNet", "org_corporate_number": null, "org_listed": null, "org_sector": "通信", "service_names": [ "ピカラ光 メール（STNetメールサービス）" ], "via_vendor": "KDDI ISP向けメール基盤", "occurred_from": null, "occurred_to": null, "detected_at": "2026-06-20", "published_at": "2026-07-06", "status": "confirmed", "cause": "vendor_breach", "affected_count": 397152, "affected_scope": "STNetメールサービス利用者 397,152名分のメールアドレスとパスワード", "leaked_fields": [ "email", "password" ], "response": { "days_detect_to_publish": 3, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-07-06", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/08/55657.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "続報。kddi-2026-06-23の下流。KDDIから6/20に報告。パスワード強制変更を実施。stnet-2025-11-21（STクラウド事案）とは別件。", "source_kind": [ "press" ] }, { "incident_id": "ctc-2026-06-23", "version": 2, "org_name": "中部テレコミュニケーション株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "通信", "service_names": [ "コミュファ光 メール", "ビジネスコミュファ メール" ], "via_vendor": "KDDI ISP向けメール基盤", "occurred_from": null, "occurred_to": null, "detected_at": "2026-06-21", "published_at": "2026-07-06", "status": "confirmed", "cause": "vendor_breach", "affected_count": 727176, "affected_scope": "コミュファ光・ビジネスコミュファのメールサービス利用顧客のメールアドレス 727,176名分", "leaked_fields": [ "email" ], "response": { "days_detect_to_publish": 2, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-07-06", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/08/55656.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "続報。kddi-2026-06-23の下流。KDDIから6/21に報告。", "source_kind": [ "press" ] }, { "incident_id": "cdc-type-2026-05-30", "version": 1, "org_name": "株式会社キャリアデザインセンター", "org_corporate_number": null, "org_listed": true, "org_sector": "その他", "service_names": [ "女の転職type" ], "via_vendor": null, "occurred_from": "2026-05-26", "occurred_to": "2026-05-28", "detected_at": null, "published_at": "2026-05-30", "status": "possibility", "cause": "unauthorized_access", "affected_count": 18253, "affected_scope": "リスト型攻撃による不正ログイン 38,442件（ユニークユーザー数18,253名、試行1,141,828件）。ログイン後に一部の会員情報ページが閲覧された可能性", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/06/12/55481.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "affected_countはユニークユーザー数。リスト型アカウントハッキング。", "source_kind": [ "press" ] }, { "incident_id": "campfire-2026-04-03", "version": 2, "org_name": "株式会社CAMPFIRE", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "CAMPFIRE" ], "via_vendor": null, "occurred_from": "2026-04-02", "occurred_to": null, "detected_at": "2026-04-02", "published_at": "2026-04-24", "status": "possibility", "cause": "unauthorized_access", "affected_count": 225846, "affected_scope": "個人情報 225,846件", "leaked_fields": [], "response": { "days_detect_to_publish": 1, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-04-24", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/05/12/55238.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "続報。システム管理用GitHubアカウントへの不正アクセス（従業員発行の認証情報が個人サーバに意図せずアップロードされ不正利用）。初報（4/3）はDB未収録。", "source_kind": [ "press" ] }, { "incident_id": "f-one-2026-02-04", "version": 3, "org_name": "エフワン株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "エフワン" ], "via_vendor": null, "occurred_from": "2026-01-30", "occurred_to": null, "detected_at": "2026-01-30", "published_at": "2026-04-08", "status": "closed", "cause": "ransomware", "affected_count": 170000, "affected_scope": "個人情報 約17万件が流出", "leaked_fields": [], "response": { "days_detect_to_publish": 5, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-04-08", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/05/08/55221.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "最終報。1/30 0時頃サーバ暗号化、8:30頃発覚。第1報・第2報はDB未収録。", "source_kind": [ "press" ] }, { "incident_id": "awa-bank-2026-04-03", "version": 1, "org_name": "株式会社阿波銀行", "org_corporate_number": null, "org_listed": true, "org_sector": "金融", "service_names": [ "阿波銀行" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-04-03", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 27745, "affected_scope": "OAシステムのテスト環境に保管していた顧客情報等 のべ27,745件", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/04/22/55113.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "件数はのべ件数。", "source_kind": [ "press" ] }, { "incident_id": "nhk-2026-03-18", "version": 1, "org_name": "日本放送協会（NHK）", "org_corporate_number": null, "org_listed": null, "org_sector": "その他", "service_names": [ "NHK 情報システム（作業申請システム）登録者" ], "via_vendor": "システム保守担当の外部ベンダー", "occurred_from": "2026-03-17", "occurred_to": "2026-03-17", "detected_at": null, "published_at": "2026-03-18", "status": "confirmed", "cause": "mis_send", "affected_count": 32940, "affected_scope": "NHK放送センター情報システムの作業申請システム登録者 計32,940人のメールアドレス（送信グループ全員のアドレスが確認できる状態で送信）", "leaked_fields": [ "email" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/03/23/54883.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "外部ベンダー作業担当者が承認依頼メールの送信先を誤って登録者全員に設定。公式発表は文字コピー不可PDF。", "source_kind": [ "press" ] }, { "incident_id": "asahi-2025-09-29", "version": 2, "org_name": "アサヒグループホールディングス株式会社", "org_corporate_number": null, "org_listed": true, "org_sector": "製造", "service_names": [ "アサヒグループ（顧客・取引先・従業員）" ], "via_vendor": null, "occurred_from": "2025-09-29", "occurred_to": null, "detected_at": null, "published_at": "2026-02-18", "status": "confirmed", "cause": "ransomware", "affected_count": 115513, "affected_scope": "個人情報 115,513件の漏えいを確認（2025年12月時点では最大191.4万件の可能性と公表）", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-02-18", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/02/27/54722.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "調査結果・再発防止策・ガバナンス強化の公表。incident_idの日付は本文記載の障害発生日（初報日は本文に明記なし）。過去の報はDB未収録。", "source_kind": [ "press" ] }, { "incident_id": "stnet-2025-11-21", "version": 2, "org_name": "株式会社STNet", "org_corporate_number": null, "org_listed": null, "org_sector": "通信", "service_names": [ "STクラウドサーバサービス", "STNet サーバ構築サービス" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "published_at": "2026-01-21", "status": "possibility", "cause": "unauthorized_access", "affected_count": 20846, "affected_scope": "STクラウドサーバサービス・サーバ構築サービスを利用する一部の企業・団体の担当者 20,846名の個人情報とシステム関係情報", "leaked_fields": [], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-01-21", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/02/09/54587.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "調査結果報告。初報（2025/11/21）はDB未収録。stnet-mail-2026-06-23（KDDI基盤事案）とは別件。", "source_kind": [ "press" ] }, { "incident_id": "fujifilm-medical-2025-12-23", "version": 1, "org_name": "富士フイルムメディカル株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "医療", "service_names": [ "富士フイルムメディカル 営業管理システム（医療従事者・販売事業者従業員）" ], "via_vendor": null, "occurred_from": "2025-06-23", "occurred_to": null, "detected_at": "2025-10-10", "published_at": "2025-12-23", "status": "possibility", "cause": "unauthorized_access", "affected_count": 590000, "affected_scope": "同社保有の医療従事者及び販売事業者従業員の個人情報 約59万人分", "leaked_fields": [], "response": { "days_detect_to_publish": 74, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/01/15/54415.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "ID・パスワードを不正入手した第三者が営業管理システムにアクセスした可能性。発覚から公表まで74日。", "source_kind": [ "press" ] }, { "incident_id": "tokushima-univ-hospital-2025-12-22", "version": 1, "org_name": "徳島大学病院", "org_corporate_number": null, "org_listed": null, "org_sector": "医療", "service_names": [ "徳島大学病院 患者" ], "via_vendor": null, "occurred_from": "2025-10-11", "occurred_to": "2025-10-22", "detected_at": "2025-10-29", "published_at": "2025-12-22", "status": "possibility", "cause": "unauthorized_access", "affected_count": 16945, "affected_scope": "同院管理システムに登録されている患者情報 16,945件", "leaked_fields": [], "response": { "days_detect_to_publish": 54, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/01/14/54403.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "発覚から公表まで54日。", "source_kind": [ "press" ] }, { "incident_id": "anabuki-2026-03-16", "version": 2, "org_name": "穴吹ハウジングサービス株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "不動産", "service_names": [ "穴吹ハウジングサービス（マンション管理）" ], "via_vendor": null, "occurred_from": "2026-02-03", "occurred_to": null, "detected_at": "2026-02-03", "published_at": "2026-05-21", "status": "closed", "cause": "ransomware", "affected_count": 207773, "affected_scope": "外部に漏えいした可能性のある個人情報は207,773件と最終確認（第4報時点は最大約496,000件）", "leaked_fields": [], "response": { "days_detect_to_publish": 0, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-05-21", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/06/03/55414.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第6報（調査結果および今後の取り組み）。2/3 5:28にランサムウェア被害確認。既存incident_idの日付（3/16）は記事日付であり実際の初報は2/3。", "source_kind": [ "press" ] }, { "incident_id": "murata-2026-03-19", "version": 2, "org_name": "株式会社村田製作所", "org_corporate_number": null, "org_listed": true, "org_sector": "製造", "service_names": [ "村田製作所 IT環境（顧客・取引先・従業員）" ], "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-02-28", "published_at": "2026-04-27", "status": "possibility", "cause": "unauthorized_access", "affected_count": 88000, "affected_scope": "個人情報 約8.8万件が漏えいした可能性", "leaked_fields": [], "response": { "days_detect_to_publish": 6, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-04-27", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/04/30/55176.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "第三報。2/28に不正アクセスの可能性を認識、初報3/6。既存incident_idの日付（3/19）は記事日付。", "source_kind": [ "press" ] }, { "incident_id": "biglobe-2026-06-23", "version": 2, "org_name": "ビッグローブ株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "通信", "service_names": [ "BIGLOBEメール" ], "via_vendor": "KDDI ISP向けメール基盤", "occurred_from": "2026-05-16", "occurred_to": null, "detected_at": "2026-06-17", "published_at": "2026-07-06", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 5016432, "affected_scope": null, "leaked_fields": [ "email", "password" ], "response": { "days_detect_to_publish": 6, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-07-06", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/08/55659.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "KDDI基盤事案の下流。パスワード463万1775件。", "source_kind": [ "press" ] }, { "incident_id": "jcom-2026-06-23", "version": 2, "org_name": "JCOM株式会社", "org_corporate_number": null, "org_listed": null, "org_sector": "通信", "service_names": [ "J:COM NET" ], "via_vendor": "KDDI ISP向けメール基盤", "occurred_from": "2026-05-16", "occurred_to": null, "detected_at": "2026-06-17", "published_at": "2026-07-06", "status": "confirmed", "cause": "unauthorized_access", "affected_count": 2593076, "affected_scope": null, "leaked_fields": [ "email" ], "response": { "days_detect_to_publish": 6, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-07-06", "announcement_still_online": null }, "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/07/14/55696.html" ], "collected_at": "2026-10-23T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "KDDI基盤事案の下流。", "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-09-30", "affected_count": null, "affected_scope": "第1報: 不正アクセス確認・一部アクセス制限（流出への言及なし）", "leaked_fields": [ "name", "address", "phone", "email", "login_id" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "公式 https://www2.sagawa-exp.co.jp/information/detail/419/", "version": 1, "incident_id": "sagawa-2026-09-30", "org_name": "佐川急便株式会社", "org_sector": "その他", "service_names": [ "佐川急便 お荷物問い合わせサービス", "スマートクラブ", "飛脚宅配便受付" ], "cause": "unauthorized_access", "source_urls": [], "published_at": "2026-09-30", "status": "possibility", "response": { "days_detect_to_publish": 0, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-10-01", "announcement_still_online": null }, "source_kind": [] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-06-21", "occurred_to": "2026-09-30", "detected_at": "2026-09-30", "affected_count": null, "affected_scope": "9/30から遡る約100日の送り状の依頼主・届け先、運賃契約先、スマートクラブ会員。9サービス停止", "leaked_fields": [ "name", "address", "phone", "email", "login_id" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.7, "notes": "第2報+第3報(窓口0120-28-3449 土日祝含む9-17時)。PPCへ10/1速報。カード・パスワード・口座は対象外。案内はWeb掲示のみの方針。", "version": 2, "incident_id": "sagawa-2026-09-30", "org_name": "佐川急便株式会社", "org_sector": "その他", "service_names": [ "佐川急便 お荷物問い合わせサービス", "スマートクラブ", "飛脚宅配便受付" ], "cause": "unauthorized_access", "source_urls": [ "https://www2.sagawa-exp.co.jp/information/detail/420/", "https://www.issoh.co.jp/tech/details/18184/" ], "published_at": "2026-10-01", "status": "possibility", "response": { "days_detect_to_publish": 0, "notified_individually": "no", "notification_channel": [ "web_only" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": true, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-09", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-06-21", "occurred_to": "2026-09-30", "detected_at": "2026-09-30", "affected_count": 53230000, "affected_scope": "最大約5,323万件（延べ。送り状データに重複多数、名寄せ継続中）。送り状: 氏名住所電話／運賃契約先／スマートクラブ: +メール・会員ID", "leaked_fields": [ "name", "address", "phone", "email", "login_id" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.7, "notes": "第5報。2026年最大の公表件数。10/23にお荷物問い合わせ再開、API・受付系は停止継続。手書き送り状は対象外。", "version": 3, "incident_id": "sagawa-2026-09-30", "org_name": "佐川急便株式会社", "org_sector": "その他", "service_names": [ "佐川急便 お荷物問い合わせサービス", "スマートクラブ", "飛脚宅配便受付" ], "cause": "unauthorized_access", "source_urls": [ "https://www2.sagawa-exp.co.jp/information/detail/430/", "https://www.watch.impress.co.jp/docs/news/2150818.html" ], "published_at": "2026-10-23", "status": "possibility", "response": { "days_detect_to_publish": 0, "notified_individually": "no", "notification_channel": [ "web_only" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": true, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-23", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "affected_count": null, "affected_scope": "全契約者の基本情報（会社名・担当者名・電話・メール・請求先メール・契約支払履歴）＋一部契約者の配信先リスト", "leaked_fields": [ "name", "phone", "email", "other" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.85, "notes": "B2B SaaS起点の連鎖。API用サーバ2台に侵入しDBから持ち出し。10/21 0:30停止、再開未定。配信先リスト漏えい該当288件の契約者には個別連絡済（giftee記載）。下流: 東京都農林水産振興財団、giftee 等。", "version": 1, "incident_id": "rakus-blastmail-2026-10-21", "org_name": "株式会社ラクスライトクラウド（ラクス子会社）", "org_sector": "通信", "service_names": [ "ブラストメール" ], "published_at": "2026-10-21", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://www.rakus.co.jp/news/2026/1021-3.html", "https://scan.netsecurity.ne.jp/article/2026/10/23/56554.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "partial", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-21", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": "ブラストメール（ラクスライトクラウド）", "occurred_from": null, "occurred_to": null, "detected_at": null, "affected_count": 16000, "affected_scope": "生産者・ボランティア参加者 最大約16,000件", "leaked_fields": [ "name", "email", "other" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.85, "notes": "ブラストメール連鎖。", "version": 1, "incident_id": "tokyo-nourin-2026-10-23", "org_name": "東京都農林水産振興財団（東京都産業労働局公表）", "org_sector": "行政", "service_names": [ "東京広域援農ボランティア" ], "published_at": "2026-10-23", "status": "confirmed", "cause": "vendor_breach", "source_urls": [ "https://www.metro.tokyo.lg.jp/information/press/2026/10/2026102317" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "official" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": "ブラストメール（ラクスライトクラウド）", "occurred_from": null, "occurred_to": null, "detected_at": null, "affected_count": null, "affected_scope": "旅先納税ID向け配信、e街の法人・自治体担当者連絡先、giftee Benefit配信登録情報。運営会社確認分288件にギフティ契約は含まれず", "leaked_fields": [ "email", "name", "login_id", "other" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.85, "notes": "ブラストメール連鎖。10/23続報で「漏えい確認されたものではない」。", "version": 1, "incident_id": "giftee-2026-10-22", "org_name": "株式会社ギフティ", "org_sector": "その他", "service_names": [ "giftee Benefit", "旅先納税", "e街プラットフォーム" ], "published_at": "2026-10-22", "status": "possibility", "cause": "vendor_breach", "source_urls": [ "https://giftee.co.jp/press/news/info20261023/" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": false, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-10-23", "announcement_still_online": null }, "source_kind": [ "official" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": "WASABI SWITCH（株式会社ワサビ）", "occurred_from": "2026-10-14", "occurred_to": null, "detected_at": "2026-10-16", "affected_count": 473, "affected_scope": "2026/10/3〜10/16にグループECで注文した顧客 473件", "leaked_fields": [ "name", "address", "phone", "email", "purchase_history" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.9, "notes": "EC一元管理SaaS経由。窓口0120-808-126。再発防止: 接続遮断・分離、委託先監査強化。", "version": 1, "incident_id": "rk-enterprise-2026-10-23", "org_name": "株式会社アールケイエンタープライズ（コメ兵グループ）", "org_sector": "小売", "service_names": [ "KOMEHYO オンライン", "BRAND OFF", "Rodeo Drive" ], "published_at": "2026-10-23", "status": "confirmed", "cause": "vendor_breach", "source_urls": [ "https://www.rk-enterprise.jp/11107/" ], "response": { "days_detect_to_publish": 7, "notified_individually": "yes", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": false, "ppc_reported": true, "inquiry_desk": true, "countermeasures_specific": true, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "official" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-20", "affected_count": 1750, "affected_scope": "案件管理システム上の顧客情報の一部（件数未公表）＋取引先・従業員750件＋端末識別情報1,000件", "leaked_fields": [ "name", "email", "other" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.85, "notes": "DBアクセスの脆弱性。顧客分の件数は未公表（1,750は取引先・端末分のみ）。窓口は準備中。再発防止はWAF・診断等具体的。", "version": 1, "incident_id": "treasure-factory-2026-10-23", "org_name": "株式会社トレジャー・ファクトリー", "org_sector": "小売", "service_names": [ "トレファク 出張買取", "トレファク引越" ], "published_at": "2026-10-23", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://www.treasure-f.com/info/detail/st825/" ], "response": { "days_detect_to_publish": 3, "notified_individually": "yes", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": true, "inquiry_desk": null, "countermeasures_specific": true, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "official" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": "2026-10-03", "occurred_to": "2026-10-10", "detected_at": "2026-10-15", "affected_count": 834947, "affected_scope": "ファンケル393,785件(368,184名)＋アテニア441,162件(417,312名)の会員", "leaked_fields": [ "email", "name", "address", "phone", "birth", "gender", "password", "other" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.7, "notes": "サブメールのパスワード（ハッシュ化）、本人認証の質問項目含む。原因機能を停止、緊急対策本部。", "version": 1, "incident_id": "fancl-2026-10-16", "org_name": "株式会社ファンケル / 株式会社アテニア", "org_sector": "小売", "service_names": [ "ファンケル オンライン", "アテニア オンライン" ], "published_at": "2026-10-16", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://www.fancl.jp/news/pdf/husei.pdf", "https://scan.netsecurity.ne.jp/article/2026/10/22/56538.html" ], "response": { "days_detect_to_publish": 1, "notified_individually": "yes", "notification_channel": [ "email" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": "2026-10-02", "occurred_to": null, "detected_at": "2026-10-03", "affected_count": 948498, "affected_scope": "infoQ会員 最大948,498件", "leaked_fields": [ "name", "gender", "birth", "email", "address", "phone", "password", "login_id", "other" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.7, "notes": "初報。全会員へメール連絡。", "version": 1, "incident_id": "gmo-research-infoq-2026-10-05", "org_name": "GMOリサーチ&AI株式会社", "org_sector": "その他", "service_names": [ "infoQ" ], "published_at": "2026-10-05", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://gmo-research.ai/pressroom/notice/notice-20261005" ], "response": { "days_detect_to_publish": 2, "notified_individually": "yes", "notification_channel": [ "email" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-10-14", "announcement_still_online": null }, "source_kind": [ "official" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": "2026-10-02", "occurred_to": null, "detected_at": "2026-10-03", "affected_count": 894082, "affected_scope": "外部持ち出し確定 894,082件（個人情報なし9,068件、持ち出されず45,348件）", "leaked_fields": [ "name", "gender", "birth", "email", "address", "phone", "password", "login_id", "other" ], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.75, "notes": "第2報。ソフトウェア脆弱性。補填はポイント不正交換分（漏えいそのものへのお詫びではない）。", "version": 2, "incident_id": "gmo-research-infoq-2026-10-05", "org_name": "GMOリサーチ&AI株式会社", "org_sector": "その他", "service_names": [ "infoQ" ], "published_at": "2026-10-14", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://gmo-research.ai/pressroom/notice/notice-20261014", "https://scan.netsecurity.ne.jp/article/2026/10/19/56497.html" ], "response": { "days_detect_to_publish": 2, "notified_individually": "yes", "notification_channel": [ "email" ], "compensation": "cash", "compensation_detail": "不正交換されたポイント611件・計2,869,500円分を全額補填", "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-14", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-15", "affected_count": null, "affected_scope": "会員情報管理システムから会員情報が第三者へ流出（件数・項目未公表）", "leaked_fields": [], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "第3報まで。件数未公表。", "version": 1, "incident_id": "nttsolmare-cmoa-2026-10-15", "org_name": "NTTソルマーレ株式会社", "org_sector": "その他", "service_names": [ "コミックシーモア" ], "published_at": "2026-10-15", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://www.nttsolmare.com/press/2026/1016-1.html", "https://scan.netsecurity.ne.jp/article/2026/10/20/56512.html" ], "response": { "days_detect_to_publish": 0, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-10-18", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-18", "affected_count": null, "affected_scope": "不正アクセスの可能性を把握しサービス停止・緊急メンテ。漏えいの有無は未公表", "leaked_fields": [], "collected_at": "2026-10-24T00:00:00+09:00", "extraction_confidence": 0.5, "notes": null, "version": 1, "incident_id": "papyless-renta-2026-10-19", "org_name": "株式会社パピレス", "org_sector": "その他", "service_names": [ "Renta!" ], "published_at": "2026-10-19", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://ssl4.eir-parts.net/doc/3641/tdnet/2896506/00.pdf", "https://scan.netsecurity.ne.jp/article/2026/10/21/56528.html" ], "response": { "days_detect_to_publish": 1, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-20", "affected_count": 26739, "affected_scope": "お名前.com デスクトップクラウド 全プランの影響の可能性があるサーバ 26,739件。サーバ内に保存された取引ツール（MT4/MT5等）の取引口座ログイン情報等", "leaked_fields": [ "login_id", "password", "other" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.85, "notes": "10/19顧客問い合わせで発覚、10/20不正プログラム設置を確認、10/21 4:00全プラン停止（再開未定）。取引口座での第三者による不正操作の報告あり。窓口03-5456-2560。GMOグループ3件目（infoQ、ConoHa WING）。", "version": 1, "incident_id": "gmo-onamae-desktopcloud-2026-10-21", "org_name": "GMOインターネット株式会社", "org_sector": "通信", "service_names": [ "お名前.com デスクトップクラウド（FX/証券 取引ツール用VPS）" ], "published_at": "2026-10-21", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://www.onamae.com/news/article/11584", "https://scan.netsecurity.ne.jp/article/2026/10/26/56564.html" ], "response": { "days_detect_to_publish": 1, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-22", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-20", "affected_count": 26739, "affected_scope": "同上。取引口座のログイン情報等が第三者に取得され不正利用された可能性（顧客から不正操作の報告）", "leaked_fields": [ "login_id", "password", "other" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.7, "notes": "第2報。証券・FX会社の取引ツールと口座のパスワード変更・ログオフを呼びかけ。", "version": 2, "incident_id": "gmo-onamae-desktopcloud-2026-10-21", "org_name": "GMOインターネット株式会社", "org_sector": "通信", "service_names": [ "お名前.com デスクトップクラウド（FX/証券 取引ツール用VPS）" ], "published_at": "2026-10-22", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/26/56564.html" ], "response": { "days_detect_to_publish": 1, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": true, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-22", "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": "2026-09-03", "occurred_to": null, "detected_at": "2026-09-16", "affected_count": 426, "affected_scope": "Webサーバー領域に不正プログラムを設置された426アカウント。会員情報・契約情報・決済情報は別環境で漏えいなしと説明", "leaked_fields": [ "other" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "不正プログラムは9/18除去。影響はサイト運営者側（公開ファイル・ログの確認を依頼）。", "version": 1, "incident_id": "gmo-conoha-wing-2026-09-20", "org_name": "GMOインターネット株式会社", "org_sector": "通信", "service_names": [ "ConoHa WING（レンタルサーバー）" ], "published_at": "2026-09-20", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://www.conoha.jp/wing/news/", "https://scan.netsecurity.ne.jp/article/2026/10/14/56450.html" ], "response": { "days_detect_to_publish": 4, "notified_individually": "yes", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-14", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-10-07", "occurred_to": null, "detected_at": null, "affected_count": null, "affected_scope": "495の企業・自治体。tesla/henry/pascal/jouleゾーンの一部顧客データは復旧困難（バックアップからのみ復元）", "leaked_fields": [], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "B2Bクラウド基盤。個人情報漏えいは未確認（犯行声明の数値は未検証）。下流: JR東は「えきねっと・大人の休日倶楽部の漏えいなし」と判断（10/19）。清水エスパルス・京都サンガ・茨城県・栃木県・小平市・足立区の障害は関連未確認。", "version": 1, "incident_id": "idcf-2026-10-07", "org_name": "株式会社IDCフロンティア（ソフトバンク子会社）", "org_sector": "通信", "service_names": [ "IDCFクラウド 東日本リージョン1" ], "published_at": "2026-10-07", "status": "possibility", "cause": "ransomware", "source_urls": [ "https://www.idcf.jp/news/topics/20261008001", "https://atmarkit.itmedia.co.jp/ait/articles/2610/09/news036.html" ], "response": { "days_detect_to_publish": 0, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": true, "followup_at": "2026-10-08", "announcement_still_online": null }, "source_kind": [ "official", "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2024-11-01", "occurred_to": "2026-09-15", "detected_at": "2026-09-15", "affected_count": 174933, "affected_scope": "2024/11/1〜2026/9/15にアプリ登録した顧客174,933人（退会者含む）", "leaked_fields": [ "name", "phone", "email", "gender", "address", "birth" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.7, "notes": "10/5に対象者へ個別メール。外部専門調査会社が調査中。", "version": 1, "incident_id": "daiki-suisan-2026-10-05", "org_name": "大起水産株式会社", "org_sector": "飲食", "service_names": [ "大起水産公式アプリ" ], "published_at": "2026-10-05", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/26/56562.html" ], "response": { "days_detect_to_publish": 20, "notified_individually": "yes", "notification_channel": [ "email" ], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-02", "affected_count": 10788963, "affected_scope": "登録10,808,78x件のうち10,788,963件。会員番号、氏名（アプリ登録名）、メールアドレス、電話番号", "leaked_fields": [ "name", "email", "phone", "other" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.7, "notes": "続報: グループ11アプリで保持する個人情報を削減し一部データのみ管理する新システムへ移行、AI検知システム導入検討。", "version": 2, "incident_id": "monogatari-2026-10-05", "org_name": "株式会社物語コーポレーション", "org_sector": "飲食", "service_names": [ "焼肉きんぐ 公式アプリ" ], "published_at": "2026-10-05", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/26/56563.html" ], "response": { "days_detect_to_publish": 3, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": true, "inquiry_desk": null, "countermeasures_specific": true, "followup_published": true, "followup_at": "2026-10-23", "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": "テクノヒル株式会社", "occurred_from": null, "occurred_to": null, "detected_at": null, "affected_count": 595, "affected_scope": "受講者最大595名（氏名、年代、性別、所属、役職、メール、パスワード、電話、経験年数等）。うち6名はメール・パスワード漏えい確認、不正ログインあり", "leaked_fields": [ "name", "email", "password", "phone", "gender", "other" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.7, "notes": null, "version": 1, "incident_id": "mhlw-technohill-1fedu-2026-10-22", "org_name": "厚生労働省（受託: テクノヒル株式会社）", "org_sector": "行政", "service_names": [ "1FEdu（被ばく低減対策 教育サイト）" ], "published_at": "2026-10-22", "status": "confirmed", "cause": "vendor_breach", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/26/56565.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "yes", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-09-20", "occurred_to": null, "detected_at": null, "affected_count": null, "affected_scope": "一部の社内情報の漏えいを確認（件数未公表）", "leaked_fields": [], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.6, "notes": "初報9/24。EDR全社導入9/30完了。B2B。", "version": 2, "incident_id": "sk-logi-2026-09-24", "org_name": "エスケーロジ株式会社", "org_sector": "その他", "service_names": [ "エスケーロジ（物流）" ], "published_at": "2026-10-03", "status": "confirmed", "cause": "ransomware", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/26/56561.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": true, "followup_published": true, "followup_at": "2026-10-03", "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": "2026-09-04", "occurred_to": "2026-09-07", "detected_at": null, "affected_count": 159, "affected_scope": "リスト型攻撃で不正ログインされ会員情報が閲覧された可能性のある159名", "leaked_fields": [ "other" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "リスト型（他所で漏れたID/パスワードの使い回し）。パスワード使い回しの実害例。", "version": 1, "incident_id": "fujiq-2026-10-20", "org_name": "株式会社富士急ハイランド", "org_sector": "その他", "service_names": [ "富士急ハイランド公式アプリ", "CLUB フジQ" ], "published_at": "2026-10-20", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/23/56549.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-10-15", "occurred_to": null, "detected_at": "2026-10-15", "affected_count": 13, "affected_scope": "パスワードリセット機能を悪用され13件のパスワードが不正変更", "leaked_fields": [ "password" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.5, "notes": null, "version": 1, "incident_id": "zkai-2026-10-19", "org_name": "株式会社Z会", "org_sector": "教育", "service_names": [ "Z-ID（Z会グループ共通ログイン）" ], "published_at": "2026-10-19", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/22/56540.html" ], "response": { "days_detect_to_publish": 4, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-09-25", "occurred_to": "2026-09-30", "detected_at": null, "affected_count": null, "affected_scope": "ユーザー情報・ホール情報を取得するリクエストを第三者が不正実行（件数未公表）", "leaked_fields": [], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.5, "notes": null, "version": 1, "incident_id": "sammy-777conpass-2026-10-02", "org_name": "株式会社サミーネットワークス", "org_sector": "その他", "service_names": [ "777CON-PASS" ], "published_at": "2026-10-02", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/22/56536.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": "2026-10-13", "affected_count": null, "affected_scope": "従業員・退職者・委託先の個人情報の流出を確認。顧客の個人情報・識別子IDが外部から照会された可能性", "leaked_fields": [ "other" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "10/13 7:09検知→7:41遮断、10/14ファイルDLを確認。", "version": 1, "incident_id": "gdo-2026-10-16", "org_name": "株式会社ゴルフダイジェスト・オンライン", "org_sector": "その他", "service_names": [ "GDO（ゴルフダイジェスト・オンライン）" ], "published_at": "2026-10-16", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/20/56514.html" ], "response": { "days_detect_to_publish": 3, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": false, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-09-14", "occurred_to": "2026-09-16", "detected_at": null, "affected_count": null, "affected_scope": "顧客情報・届け先情報の一部（件数未公表）", "leaked_fields": [ "name", "address", "phone", "email" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.45, "notes": null, "version": 1, "incident_id": "rashinban-2026-10-01", "org_name": "株式会社らしんばん", "org_sector": "小売", "service_names": [ "らしんばん オンライン" ], "published_at": "2026-10-01", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/20/56510.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": true, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "affected_count": null, "affected_scope": "10/16 10:20〜緊急サービス停止（理由・漏えいの有無は未公表）", "leaked_fields": [], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.4, "notes": "ユミルリンク事案との関連は未確認。", "version": 1, "incident_id": "japanpost-yuyupoint-2026-10-16", "org_name": "日本郵政株式会社", "org_sector": "その他", "service_names": [ "ゆうゆうポイント" ], "published_at": "2026-10-16", "status": "possibility", "cause": "other", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/21/56529.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": "日本経済新聞社のシステム", "occurred_from": null, "occurred_to": null, "detected_at": null, "affected_count": null, "affected_scope": "日経の漏えい183万件の中に同社サービス利用者の情報が含まれる可能性", "leaked_fields": [], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.5, "notes": null, "version": 1, "incident_id": "nikkei-natgeo-2026-10-17", "org_name": "株式会社日経ナショナル ジオグラフィック", "org_sector": "その他", "service_names": [ "日経ナショナル ジオグラフィック（定期購読等）" ], "published_at": "2026-10-17", "status": "possibility", "cause": "vendor_breach", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/21/56530.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": "2026-09-27", "occurred_to": "2026-09-28", "detected_at": "2026-09-28", "affected_count": null, "affected_scope": "会員情報・受注情報の一部。注文情報と一致する偽の返金案内メールが顧客に届いて発覚", "leaked_fields": [ "name", "email", "purchase_history" ], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.5, "notes": "漏えい情報を使ったフィッシング（返金詐欺）が実際に発生した例。", "version": 1, "incident_id": "abahouse-2026-10-03", "org_name": "株式会社アバハウスインターナショナル", "org_sector": "小売", "service_names": [ "ABAHOUSE オンライン" ], "published_at": "2026-10-03", "status": "confirmed", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/23/56553.html" ], "response": { "days_detect_to_publish": 5, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": null, "followup_at": null, "announcement_still_online": null }, "source_kind": [ "press" ] }, { "org_corporate_number": null, "org_listed": false, "via_vendor": null, "occurred_from": null, "occurred_to": null, "detected_at": null, "affected_count": null, "affected_scope": "オンラインストア利用顧客の情報が漏えいした可能性（続報）", "leaked_fields": [], "collected_at": "2026-10-26T00:00:00+09:00", "extraction_confidence": 0.45, "notes": "初報3/26。", "version": 2, "incident_id": "moonstar-2026-03-26", "org_name": "株式会社ムーンスター", "org_sector": "小売", "service_names": [ "ムーンスター オンラインストア" ], "published_at": "2026-10-02", "status": "possibility", "cause": "unauthorized_access", "source_urls": [ "https://scan.netsecurity.ne.jp/article/2026/10/23/56551.html" ], "response": { "days_detect_to_publish": null, "notified_individually": "unknown", "notification_channel": [], "compensation": null, "compensation_detail": null, "card_reissue_guidance": null, "ppc_reported": null, "inquiry_desk": null, "countermeasures_specific": null, "followup_published": true, "followup_at": "2026-10-02", "announcement_still_online": null }, "source_kind": [ "press" ] } ]