{"title":"Incidents in Japan","description":"Breaches and advisories naming victims in Japan.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/amadeus-incident-exposes-booking-data-at-singapore-airlines-cathay-pacific-japan/","title":"Amadeus incident exposes booking data at Singapore Airlines, Cathay Pacific, Japan Airlines and other Asian","url":"https://vulnpocalypse.dev/advisories/amadeus-incident-exposes-booking-data-at-singapore-airlines-cathay-pacific-japan/","date":"2026-11-11","summary":"A vulnerability in an Amadeus travel booking display environment exposed passenger booking data at several Asian airlines, and the cause is still under","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/the420in-reports-japan-approved-10-billion-yen-cybersecurity-package/","title":"The420.in reports Japan approved 10 billion yen cybersecurity package","url":"https://vulnpocalypse.dev/advisories/the420in-reports-japan-approved-10-billion-yen-cybersecurity-package/","date":"2026-11-06","summary":"The420.in reports Japan approved a roughly 10 billion yen cyber package after breaches; no fixes issued, so review your own incident readiness.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/matsuya-foods-holdings-matsuya-app-management-system-breached-238m/","title":"Matsuya Foods Holdings: Matsuya app management system breached, 2.38M delivery/order records leaked","url":"https://vulnpocalypse.dev/advisories/matsuya-foods-holdings-matsuya-app-management-system-breached-238m/","date":"2026-10-28","summary":"The company said a third party gained unauthorized access to the management system of the Matsuya official app (Matsuben Net, Mobile Order, Matsuben...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/ai-driven-intrusions-against-japan-including-a-44-agent-cyberstrikeai/","title":"AI-driven intrusions against Japan, including a 44-agent CyberStrikeAI workflow","url":"https://vulnpocalypse.dev/advisories/ai-driven-intrusions-against-japan-including-a-44-agent-cyberstrikeai/","date":"2026-10-27","summary":"TrendAI (formerly Trend Micro enterprise) describes three cases.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/and-st-hd-apparel-group-business-servers-breached-about-25m-customer/","title":"and ST HD (apparel group): business servers breached, about 2.5M customer records possibly leaked","url":"https://vulnpocalypse.dev/advisories/and-st-hd-apparel-group-business-servers-breached-about-25m-customer/","date":"2026-10-23","summary":"In a TSE disclosure, and ST HD said that from about 7:30 am on 22 Oct an outside party made \"login attempts, intrusion and data extraction\" against several...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/trust-bank-furusato-choice-4454097-donor-records-leaked-including-tax/","title":"Trust Bank (Furusato Choice): 4,454,097 donor records leaked including tax deduction estimates","url":"https://vulnpocalypse.dev/advisories/trust-bank-furusato-choice-4454097-donor-records-leaked-including-tax/","date":"2026-10-20","summary":"Trust Bank said a third party accessed member data on 17 Oct and 4,454,097 records leaked (figure may change).","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/hakuhodo-housing-energy-saving-2024-campaign-secretariat-23918/","title":"Hakuhodo / Housing Energy Saving 2024 Campaign secretariat: 23,918 registered-business contacts possibly leaked","url":"https://vulnpocalypse.dev/advisories/hakuhodo-housing-energy-saving-2024-campaign-secretariat-23918/","date":"2026-10-20","summary":"MLIT said \"unauthorized external operation\" of the system run by Hakuhodo, the campaign secretariat, may have leaked data on 23,918 individuals at 16,950...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/ymirlink-cuenote-email-platform-library-vulnerability-let-attackers/","title":"YMIRLINK (Cuenote email platform): library vulnerability let attackers export 51.6M recipient records from 49 customer systems","url":"https://vulnpocalypse.dev/advisories/ymirlink-cuenote-email-platform-library-vulnerability-let-attackers/","date":"2026-10-19","summary":"YMIRLINK said on 16 Oct staff found unauthorized access; its second report (26 Oct) says data was exported from 49 single-tenant Cuenote FC (bulk email)...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/japanese-prefectural-police-forces-via-contractor-arcadias-safety/","title":"Japanese prefectural police forces (via contractor Arcadia's safety-confirmation system): staff data of up to 22 forces possibly leaked","url":"https://vulnpocalypse.dev/advisories/japanese-prefectural-police-forces-via-contractor-arcadias-safety/","date":"2026-10-19","summary":"Kyodo reported that Saitama Prefectural Police said on 19 Oct that names, affiliations and private emails of about 13,000 officers and staff in its...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/trade-works-iwaicosmo-securities-online-trading-system-admin-function/","title":"Trade Works / IwaiCosmo Securities: online trading system admin function abused, 4,975 customers' data leaked and unauthorized orders placed","url":"https://vulnpocalypse.dev/advisories/trade-works-iwaicosmo-securities-online-trading-system-admin-function/","date":"2026-10-16","summary":"Trade Works said that on 14 Oct a third party abused the internet trading system it provides to IwaiCosmo Securities, leaking names, emails and other data.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/burger-king-japan-app-user-server-accessed-1118-million-records/","title":"Burger King Japan: app user server accessed, 11.18 million records","url":"https://vulnpocalypse.dev/advisories/burger-king-japan-app-user-server-accessed-1118-million-records/","date":"2026-10-16","summary":"Burger King Japan said a server holding official-app user data was accessed between 2 and 7 Oct 2026.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/medley-at-link-clinic-booking-system-database-accessed-via-planted/","title":"Medley (At-Link clinic booking system): database accessed via planted program, clinics including Fukuda Hospital suspend online booking","url":"https://vulnpocalypse.dev/advisories/medley-at-link-clinic-booking-system-database-accessed-via-planted/","date":"2026-10-15","summary":"Medley said a third party accessed the @link clinic support system, the At-Link patient app and related services between late September and mid-October...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/maruki-ikakikai-medical-equipment-distributor-core-ordering-and/","title":"Maruki Ikakikai (medical equipment distributor): core ordering and inventory system down after intrusion","url":"https://vulnpocalypse.dev/advisories/maruki-ikakikai-medical-equipment-distributor-core-ordering-and/","date":"2026-10-15","summary":"The Sendai distributor said its core system (ordering, purchasing, inbound/outbound inventory) \"went down entirely\" at about 10:00 on 15 Oct due to a...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/arcadia-speecan-raiden-japan-disaster-alert-platform-used-by/","title":"Arcadia SpeeCAN RAIDEN (Japan): disaster-alert platform used by municipalities breached, up to 3.14 million email addresses","url":"https://vulnpocalypse.dev/advisories/arcadia-speecan-raiden-japan-disaster-alert-platform-used-by/","date":"2026-10-13","summary":"Arcadia's cloud mass-notification service for disaster information (875 contracts, used by municipalities, companies and organisations) was accessed...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/adventure-inc-skyticket-three-intrusions-about-1464m-customer-records/","title":"Adventure Inc. (skyticket): three intrusions, about 14.64M customer records leaked, later bank and card data","url":"https://vulnpocalypse.dev/advisories/adventure-inc-skyticket-three-intrusions-about-1464m-customer-records/","date":"2026-10-09","summary":"Adventure said attackers abused some skyticket admin functions (2 to 4 Oct) to reach other servers and cloud data, leaking about 14.64M records (names...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/nissui-logistics-third-party-data-center-intrusion-halts-receiving/","title":"Nissui Logistics: third-party data center intrusion halts receiving and shipping","url":"https://vulnpocalypse.dev/advisories/nissui-logistics-third-party-data-center-intrusion-halts-receiving/","date":"2026-10-07","summary":"Nissui said a system failure at group firm Nissui Logistics meant goods \"cannot currently be received or shipped\".","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/idc-frontier-softbank-group-cloud-ransomware-via-portal-auth/","title":"IDC Frontier (SoftBank group cloud): ransomware via portal auth vulnerability encrypts VMs of 495 companies and municipalities","url":"https://vulnpocalypse.dev/advisories/idc-frontier-softbank-group-cloud-ransomware-via-portal-auth/","date":"2026-10-07","summary":"IDC Frontier said a ransomware attack from about 3:40 am on 7 Oct stopped and encrypted virtual servers in part of IDCF Cloud East Japan Region 1...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/mr-max-holdings-app-and-online-store-servers-breached-up-to-1735154/","title":"Mr Max Holdings: app and online store servers breached, up to 1,735,154 members' data leaked","url":"https://vulnpocalypse.dev/advisories/mr-max-holdings-app-and-online-store-servers-breached-up-to-1735154/","date":"2026-10-06","summary":"Mr Max said suspicious server access was confirmed on the evening of 3 Oct and member ID, name, email and phone of up to 1,735,154 members leaked.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/asahi-kasei-therapeutics-pharma-digital-hcp-portal-database-breached/","title":"Asahi Kasei Therapeutics: Pharma DIGITAL HCP portal database breached at operator, up to about 514,000 doctors' records","url":"https://vulnpocalypse.dev/advisories/asahi-kasei-therapeutics-pharma-digital-hcp-portal-database-breached/","date":"2026-10-06","summary":"The company said its operator Iyaku Joho Net reported on 2 Oct that a cyberattack accessed the member database linked to Pharma DIGITAL.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/scala-communications-i-ask-faq-inquiry-system-admin-site-login-and/","title":"Scala Communications (i-ask FAQ / inquiry system): admin site login and planted program expose up to 713,126 inquiries at Daiwa Securities, Citizen, Sompo Japan and others","url":"https://vulnpocalypse.dev/advisories/scala-communications-i-ask-faq-inquiry-system-admin-site-login-and/","date":"2026-10-05","summary":"Per Impress, an intruder logged into the i-ask admin site without authorization between about 20:30 on 2 Oct and 08:00 on 3 Oct, installed a program and...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/monogatari-corporation-yakiniku-king-app-10788963-app-members-data/","title":"Monogatari Corporation (Yakiniku King app): 10,788,963 app members' data leaked","url":"https://vulnpocalypse.dev/advisories/monogatari-corporation-yakiniku-king-app-10788963-app-members-data/","date":"2026-10-05","summary":"Monogatari said a third party accessed the Yakiniku King app's member management system, confirmed 2 Oct, and member number, name, email and phone of...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/daiki-suisan-seafood-restaurant-chain-app-174933-app-users-data/","title":"Daiki Suisan (seafood restaurant chain app): 174,933 app users' data possibly leaked","url":"https://vulnpocalypse.dev/advisories/daiki-suisan-seafood-restaurant-chain-app-174933-app-users-data/","date":"2026-10-05","summary":"Daiki Suisan said its official app system was accessed by a third party (confirmed 15 Sep).","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/abahouse-international-overseas-intruder-installs-program-and-reads/","title":"ABAHOUSE International: overseas intruder installs program and reads member and order database","url":"https://vulnpocalypse.dev/advisories/abahouse-international-overseas-intruder-installs-program-and-reads/","date":"2026-10-03","summary":"ABAHOUSE said an overseas third party accessed internal systems from late 27 Sep to 28 Sep and member ID, name, address, phone, email, DOB, gender and...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/osaka-metropolitan-university-ransomware-on-virtualization-platform/","title":"Osaka Metropolitan University: ransomware on virtualization platform stops about 500 servers, classes cancelled","url":"https://vulnpocalypse.dev/advisories/osaka-metropolitan-university-ransomware-on-virtualization-platform/","date":"2026-10-02","summary":"Per Kyodo and Business+IT, a system-wide outage began early on 2 Oct.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/dai-ichi-life-group-dai-ichi-life-insurance-shared-hr-system-accessed/","title":"Dai-ichi Life Group / Dai-ichi Life Insurance: shared HR system accessed, about 120,000 employees and retirees exposed","url":"https://vulnpocalypse.dev/advisories/dai-ichi-life-group-dai-ichi-life-insurance-shared-hr-system-accessed/","date":"2026-10-02","summary":"The companies said they detected unauthorized access on 24 Sep to an employee HR system both use, and data of about 120,000 people (about 50,000 current...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/japan-atomic-energy-agency-jrr-3-research-reactor-user-site-breached/","title":"Japan Atomic Energy Agency: JRR-3 research-reactor user site breached, ID documents and radiation health exams taken","url":"https://vulnpocalypse.dev/advisories/japan-atomic-energy-agency-jrr-3-research-reactor-user-site-breached/","date":"2026-10-01","summary":"JAEA confirmed unauthorized access on 25 Sep 2026 to a cloud-hosted research support site for external users of the JRR-3 research reactor (Tokai).","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/yoshinoya-holdings-yoshinoya-hanamaru-ex-recruiting-vendor-applynow/","title":"Yoshinoya Holdings (Yoshinoya, Hanamaru): ex-recruiting vendor ApplyNow breached, 5,366 applicants' data kept after contract end leaked","url":"https://vulnpocalypse.dev/advisories/yoshinoya-holdings-yoshinoya-hanamaru-ex-recruiting-vendor-applynow/","date":"2026-09-30","summary":"Per ITmedia, Yoshinoya HD said 5,366 applicant records (4,998 Yoshinoya, 368 Hanamaru) from April 2022 to June 2024, 418 employee records and 418 recruiter...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/sagawa-express-parcel-tracking-system-breached-up-to-about-5323m/","title":"Sagawa Express: parcel tracking system breached, up to about 53.23M personal records (with duplicates) possibly leaked","url":"https://vulnpocalypse.dev/advisories/sagawa-express-parcel-tracking-system-breached-up-to-about-5323m/","date":"2026-09-30","summary":"Sagawa said unauthorized access to its internet cargo system (package inquiry service) was found at 7:30 am on 30 Sep.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/yamato-transport-kuroneko-deferred-payment-service-breached-about/","title":"Yamato Transport: Kuroneko deferred payment service breached, about 5.26M user records exposed","url":"https://vulnpocalypse.dev/advisories/yamato-transport-kuroneko-deferred-payment-service-breached-about/","date":"2026-09-29","summary":"Yamato said a third party accessed the Kuroneko pay-later service (detected 28 Sep).","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/seicomart-app-server-used-to-reach-member-database-574647-members/","title":"Seicomart: app server used to reach member database, 574,647 members' data viewed","url":"https://vulnpocalypse.dev/advisories/seicomart-app-server-used-to-reach-member-database-574647-members/","date":"2026-09-29","summary":"Seicomart said a third party accessed the member server via the Seicomart App server.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/tokyo-metro-japan-metpo-loyalty-programme-accessed-about-59000-email/","title":"Tokyo Metro (Japan): Metpo loyalty programme accessed, about 59,000 email addresses exposed","url":"https://vulnpocalypse.dev/advisories/tokyo-metro-japan-metpo-loyalty-programme-accessed-about-59000-email/","date":"2026-09-27","summary":"Tokyo Metro announced on 27 Sep that an unauthorized third party accessed the email addresses of about 59,000 customers enrolled in its Metpo loyalty...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/starts-publishing-ozmall-mass-overseas-access-exposes-up-to-447610/","title":"Starts Publishing (OZmall): mass overseas access exposes up to 447,610 member emails","url":"https://vulnpocalypse.dev/advisories/starts-publishing-ozmall-mass-overseas-access-exposes-up-to-447610/","date":"2026-09-27","summary":"Starts Publishing said its systems detected a large volume of unauthorized access from overseas on 26 Sep, and up to 447,610 OZmall members' email...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/nippon-rent-a-car-service-two-separate-attacks-on-nr-app-expose-96/","title":"Nippon Rent-A-Car Service: two separate attacks on NR app expose 96 members incl. driver's licence data","url":"https://vulnpocalypse.dev/advisories/nippon-rent-a-car-service-two-separate-attacks-on-nr-app-expose-96/","date":"2026-09-26","summary":"The company said on 26 Sep that 41 members' data in the Nippon Rent-A-Car app may have been viewed, and on 1 Oct that a different-method attack from 19 to...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/keio-corporation-japan-ransomware-disrupts-hospitality-and-payment/","title":"Keio Corporation (Japan): ransomware disrupts hospitality and payment systems","url":"https://vulnpocalypse.dev/advisories/keio-corporation-japan-ransomware-disrupts-hospitality-and-payment/","date":"2026-09-26","summary":"Keio: \"In the early hours of September 26, 2026, we confirmed a ransomware attack on our group's servers.\" Some business systems, reportedly payments and...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/ikegami-tsushinki-servers-encrypted-data-appearing-to-be-its-own/","title":"Ikegami Tsushinki: servers encrypted, data appearing to be its own posted on dark web site","url":"https://vulnpocalypse.dev/advisories/ikegami-tsushinki-servers-encrypted-data-appearing-to-be-its-own/","date":"2026-09-24","summary":"Ikegami said it received outside information on 21 Sep of a possible cyberattack.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/japan-digital-agency-government-solution-service-vpn-flaw-exposes/","title":"Japan Digital Agency (Government Solution Service): VPN flaw exposes about 246,000 personal records","url":"https://vulnpocalypse.dev/advisories/japan-digital-agency-government-solution-service-vpn-flaw-exposes/","date":"2026-09-11","summary":"The Digital Agency said a third party breached the shared government IT platform GSS \"by exploiting a vulnerability in a network connection device (VPN)\".","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/nichirei-japanese-cold-chain-logistics-and-frozen-food-systems/","title":"Nichirei (Japanese cold-chain logistics and frozen food): systems disconnected, refrigerated warehousing and shipments disrupted","url":"https://vulnpocalypse.dev/advisories/nichirei-japanese-cold-chain-logistics-and-frozen-food-systems/","date":"2026-07-17","summary":"Nichirei's systems were hit on 13 Jul 2026 and disconnected; operations at Nichirei Logistics Group refrigerated warehouses and Nichirei Foods shipping...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/aflac-japan-438-million-customers-policy-and-bank-data-accessed/","title":"Aflac Japan: 4.38 million customers' policy and bank data accessed","url":"https://vulnpocalypse.dev/advisories/aflac-japan-438-million-customers-policy-and-bank-data-accessed/","date":"2026-06-30","summary":"Aflac's SEC filing (30 Jun) says a third party \"unlawfully accessed certain of Aflac Japan's systems\" from 15 to 25 Jun 2026.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/kddi-and-five-other-japanese-isps-zero-day-in-third-party-software-on/","title":"KDDI and five other Japanese ISPs: zero-day in third-party software on a shared email platform exposes 12.2 million addresses and 7.6 million passwords","url":"https://vulnpocalypse.dev/advisories/kddi-and-five-other-japanese-isps-zero-day-in-third-party-software-on/","date":"2026-06-28","summary":"KDDI said attackers breached an email system it operates for itself and five ISPs (STNet, JCOM, Chubu Telecommunications, NIFTY, BIGLOBE) on 16 May 2026.","tags":["breach"]}]}