https://vulnpocalypse.dev/feeds/Breaches and advisories naming victims in Japan.enThu, 12 Nov 2026 16:59:02 +0000https://vulnpocalypse.dev/advisories/amadeus-incident-exposes-booking-data-at-singapore-airlines-cathay-pacific-japan/https://vulnpocalypse.dev/advisories/amadeus-incident-exposes-booking-data-at-singapore-airlines-cathay-pacific-japan/Wed, 11 Nov 2026 12:00:00 +0000A vulnerability in an Amadeus travel booking display environment exposed passenger booking data at several Asian airlines, and the cause is still underbreachhttps://vulnpocalypse.dev/advisories/the420in-reports-japan-approved-10-billion-yen-cybersecurity-package/https://vulnpocalypse.dev/advisories/the420in-reports-japan-approved-10-billion-yen-cybersecurity-package/Fri, 06 Nov 2026 12:00:00 +0000The420.in reports Japan approved a roughly 10 billion yen cyber package after breaches; no fixes issued, so review your own incident readiness.breachhttps://vulnpocalypse.dev/advisories/matsuya-foods-holdings-matsuya-app-management-system-breached-238m/https://vulnpocalypse.dev/advisories/matsuya-foods-holdings-matsuya-app-management-system-breached-238m/Wed, 28 Oct 2026 12:00:00 +0000The company said a third party gained unauthorized access to the management system of the Matsuya official app (Matsuben Net, Mobile Order, Matsuben...breachhttps://vulnpocalypse.dev/advisories/ai-driven-intrusions-against-japan-including-a-44-agent-cyberstrikeai/https://vulnpocalypse.dev/advisories/ai-driven-intrusions-against-japan-including-a-44-agent-cyberstrikeai/Tue, 27 Oct 2026 12:00:00 +0000TrendAI (formerly Trend Micro enterprise) describes three cases.breachhttps://vulnpocalypse.dev/advisories/and-st-hd-apparel-group-business-servers-breached-about-25m-customer/https://vulnpocalypse.dev/advisories/and-st-hd-apparel-group-business-servers-breached-about-25m-customer/Fri, 23 Oct 2026 12:00:00 +0000In a TSE disclosure, and ST HD said that from about 7:30 am on 22 Oct an outside party made "login attempts, intrusion and data extraction" against several...breachhttps://vulnpocalypse.dev/advisories/trust-bank-furusato-choice-4454097-donor-records-leaked-including-tax/https://vulnpocalypse.dev/advisories/trust-bank-furusato-choice-4454097-donor-records-leaked-including-tax/Tue, 20 Oct 2026 12:00:00 +0000Trust Bank said a third party accessed member data on 17 Oct and 4,454,097 records leaked (figure may change).breachhttps://vulnpocalypse.dev/advisories/hakuhodo-housing-energy-saving-2024-campaign-secretariat-23918/https://vulnpocalypse.dev/advisories/hakuhodo-housing-energy-saving-2024-campaign-secretariat-23918/Tue, 20 Oct 2026 12:00:00 +0000MLIT said "unauthorized external operation" of the system run by Hakuhodo, the campaign secretariat, may have leaked data on 23,918 individuals at 16,950...breachhttps://vulnpocalypse.dev/advisories/ymirlink-cuenote-email-platform-library-vulnerability-let-attackers/https://vulnpocalypse.dev/advisories/ymirlink-cuenote-email-platform-library-vulnerability-let-attackers/Mon, 19 Oct 2026 12:00:00 +0000YMIRLINK said on 16 Oct staff found unauthorized access; its second report (26 Oct) says data was exported from 49 single-tenant Cuenote FC (bulk email)...breachhttps://vulnpocalypse.dev/advisories/japanese-prefectural-police-forces-via-contractor-arcadias-safety/https://vulnpocalypse.dev/advisories/japanese-prefectural-police-forces-via-contractor-arcadias-safety/Mon, 19 Oct 2026 12:00:00 +0000Kyodo reported that Saitama Prefectural Police said on 19 Oct that names, affiliations and private emails of about 13,000 officers and staff in its...breachhttps://vulnpocalypse.dev/advisories/trade-works-iwaicosmo-securities-online-trading-system-admin-function/https://vulnpocalypse.dev/advisories/trade-works-iwaicosmo-securities-online-trading-system-admin-function/Fri, 16 Oct 2026 12:00:00 +0000Trade Works said that on 14 Oct a third party abused the internet trading system it provides to IwaiCosmo Securities, leaking names, emails and other data.breachhttps://vulnpocalypse.dev/advisories/burger-king-japan-app-user-server-accessed-1118-million-records/https://vulnpocalypse.dev/advisories/burger-king-japan-app-user-server-accessed-1118-million-records/Fri, 16 Oct 2026 12:00:00 +0000Burger King Japan said a server holding official-app user data was accessed between 2 and 7 Oct 2026.breachhttps://vulnpocalypse.dev/advisories/medley-at-link-clinic-booking-system-database-accessed-via-planted/https://vulnpocalypse.dev/advisories/medley-at-link-clinic-booking-system-database-accessed-via-planted/Thu, 15 Oct 2026 12:00:00 +0000Medley said a third party accessed the @link clinic support system, the At-Link patient app and related services between late September and mid-October...breachhttps://vulnpocalypse.dev/advisories/maruki-ikakikai-medical-equipment-distributor-core-ordering-and/https://vulnpocalypse.dev/advisories/maruki-ikakikai-medical-equipment-distributor-core-ordering-and/Thu, 15 Oct 2026 12:00:00 +0000The Sendai distributor said its core system (ordering, purchasing, inbound/outbound inventory) "went down entirely" at about 10:00 on 15 Oct due to a...breachhttps://vulnpocalypse.dev/advisories/arcadia-speecan-raiden-japan-disaster-alert-platform-used-by/https://vulnpocalypse.dev/advisories/arcadia-speecan-raiden-japan-disaster-alert-platform-used-by/Tue, 13 Oct 2026 12:00:00 +0000Arcadia's cloud mass-notification service for disaster information (875 contracts, used by municipalities, companies and organisations) was accessed...breachhttps://vulnpocalypse.dev/advisories/adventure-inc-skyticket-three-intrusions-about-1464m-customer-records/https://vulnpocalypse.dev/advisories/adventure-inc-skyticket-three-intrusions-about-1464m-customer-records/Fri, 09 Oct 2026 12:00:00 +0000Adventure said attackers abused some skyticket admin functions (2 to 4 Oct) to reach other servers and cloud data, leaking about 14.64M records (names...breachhttps://vulnpocalypse.dev/advisories/nissui-logistics-third-party-data-center-intrusion-halts-receiving/https://vulnpocalypse.dev/advisories/nissui-logistics-third-party-data-center-intrusion-halts-receiving/Wed, 07 Oct 2026 12:00:00 +0000Nissui said a system failure at group firm Nissui Logistics meant goods "cannot currently be received or shipped".breachhttps://vulnpocalypse.dev/advisories/idc-frontier-softbank-group-cloud-ransomware-via-portal-auth/https://vulnpocalypse.dev/advisories/idc-frontier-softbank-group-cloud-ransomware-via-portal-auth/Wed, 07 Oct 2026 12:00:00 +0000IDC Frontier said a ransomware attack from about 3:40 am on 7 Oct stopped and encrypted virtual servers in part of IDCF Cloud East Japan Region 1...breachhttps://vulnpocalypse.dev/advisories/mr-max-holdings-app-and-online-store-servers-breached-up-to-1735154/https://vulnpocalypse.dev/advisories/mr-max-holdings-app-and-online-store-servers-breached-up-to-1735154/Tue, 06 Oct 2026 12:00:00 +0000Mr Max said suspicious server access was confirmed on the evening of 3 Oct and member ID, name, email and phone of up to 1,735,154 members leaked.breachhttps://vulnpocalypse.dev/advisories/asahi-kasei-therapeutics-pharma-digital-hcp-portal-database-breached/https://vulnpocalypse.dev/advisories/asahi-kasei-therapeutics-pharma-digital-hcp-portal-database-breached/Tue, 06 Oct 2026 12:00:00 +0000The company said its operator Iyaku Joho Net reported on 2 Oct that a cyberattack accessed the member database linked to Pharma DIGITAL.breachhttps://vulnpocalypse.dev/advisories/scala-communications-i-ask-faq-inquiry-system-admin-site-login-and/https://vulnpocalypse.dev/advisories/scala-communications-i-ask-faq-inquiry-system-admin-site-login-and/Mon, 05 Oct 2026 12:00:00 +0000Per Impress, an intruder logged into the i-ask admin site without authorization between about 20:30 on 2 Oct and 08:00 on 3 Oct, installed a program and...breachhttps://vulnpocalypse.dev/advisories/monogatari-corporation-yakiniku-king-app-10788963-app-members-data/https://vulnpocalypse.dev/advisories/monogatari-corporation-yakiniku-king-app-10788963-app-members-data/Mon, 05 Oct 2026 12:00:00 +0000Monogatari said a third party accessed the Yakiniku King app's member management system, confirmed 2 Oct, and member number, name, email and phone of...breachhttps://vulnpocalypse.dev/advisories/daiki-suisan-seafood-restaurant-chain-app-174933-app-users-data/https://vulnpocalypse.dev/advisories/daiki-suisan-seafood-restaurant-chain-app-174933-app-users-data/Mon, 05 Oct 2026 12:00:00 +0000Daiki Suisan said its official app system was accessed by a third party (confirmed 15 Sep).breachhttps://vulnpocalypse.dev/advisories/abahouse-international-overseas-intruder-installs-program-and-reads/https://vulnpocalypse.dev/advisories/abahouse-international-overseas-intruder-installs-program-and-reads/Sat, 03 Oct 2026 12:00:00 +0000ABAHOUSE said an overseas third party accessed internal systems from late 27 Sep to 28 Sep and member ID, name, address, phone, email, DOB, gender and...breachhttps://vulnpocalypse.dev/advisories/osaka-metropolitan-university-ransomware-on-virtualization-platform/https://vulnpocalypse.dev/advisories/osaka-metropolitan-university-ransomware-on-virtualization-platform/Fri, 02 Oct 2026 12:00:00 +0000Per Kyodo and Business+IT, a system-wide outage began early on 2 Oct.breachhttps://vulnpocalypse.dev/advisories/dai-ichi-life-group-dai-ichi-life-insurance-shared-hr-system-accessed/https://vulnpocalypse.dev/advisories/dai-ichi-life-group-dai-ichi-life-insurance-shared-hr-system-accessed/Fri, 02 Oct 2026 12:00:00 +0000The companies said they detected unauthorized access on 24 Sep to an employee HR system both use, and data of about 120,000 people (about 50,000 current...breachhttps://vulnpocalypse.dev/advisories/japan-atomic-energy-agency-jrr-3-research-reactor-user-site-breached/https://vulnpocalypse.dev/advisories/japan-atomic-energy-agency-jrr-3-research-reactor-user-site-breached/Thu, 01 Oct 2026 12:00:00 +0000JAEA confirmed unauthorized access on 25 Sep 2026 to a cloud-hosted research support site for external users of the JRR-3 research reactor (Tokai).breachhttps://vulnpocalypse.dev/advisories/yoshinoya-holdings-yoshinoya-hanamaru-ex-recruiting-vendor-applynow/https://vulnpocalypse.dev/advisories/yoshinoya-holdings-yoshinoya-hanamaru-ex-recruiting-vendor-applynow/Wed, 30 Sep 2026 12:00:00 +0000Per ITmedia, Yoshinoya HD said 5,366 applicant records (4,998 Yoshinoya, 368 Hanamaru) from April 2022 to June 2024, 418 employee records and 418 recruiter...breachhttps://vulnpocalypse.dev/advisories/sagawa-express-parcel-tracking-system-breached-up-to-about-5323m/https://vulnpocalypse.dev/advisories/sagawa-express-parcel-tracking-system-breached-up-to-about-5323m/Wed, 30 Sep 2026 12:00:00 +0000Sagawa said unauthorized access to its internet cargo system (package inquiry service) was found at 7:30 am on 30 Sep.breachhttps://vulnpocalypse.dev/advisories/yamato-transport-kuroneko-deferred-payment-service-breached-about/https://vulnpocalypse.dev/advisories/yamato-transport-kuroneko-deferred-payment-service-breached-about/Tue, 29 Sep 2026 12:00:00 +0000Yamato said a third party accessed the Kuroneko pay-later service (detected 28 Sep).breachhttps://vulnpocalypse.dev/advisories/seicomart-app-server-used-to-reach-member-database-574647-members/https://vulnpocalypse.dev/advisories/seicomart-app-server-used-to-reach-member-database-574647-members/Tue, 29 Sep 2026 12:00:00 +0000Seicomart said a third party accessed the member server via the Seicomart App server.breachhttps://vulnpocalypse.dev/advisories/tokyo-metro-japan-metpo-loyalty-programme-accessed-about-59000-email/https://vulnpocalypse.dev/advisories/tokyo-metro-japan-metpo-loyalty-programme-accessed-about-59000-email/Sun, 27 Sep 2026 12:00:00 +0000Tokyo Metro announced on 27 Sep that an unauthorized third party accessed the email addresses of about 59,000 customers enrolled in its Metpo loyalty...breachhttps://vulnpocalypse.dev/advisories/starts-publishing-ozmall-mass-overseas-access-exposes-up-to-447610/https://vulnpocalypse.dev/advisories/starts-publishing-ozmall-mass-overseas-access-exposes-up-to-447610/Sun, 27 Sep 2026 12:00:00 +0000Starts Publishing said its systems detected a large volume of unauthorized access from overseas on 26 Sep, and up to 447,610 OZmall members' email...breachhttps://vulnpocalypse.dev/advisories/nippon-rent-a-car-service-two-separate-attacks-on-nr-app-expose-96/https://vulnpocalypse.dev/advisories/nippon-rent-a-car-service-two-separate-attacks-on-nr-app-expose-96/Sat, 26 Sep 2026 12:00:00 +0000The company said on 26 Sep that 41 members' data in the Nippon Rent-A-Car app may have been viewed, and on 1 Oct that a different-method attack from 19 to...breachhttps://vulnpocalypse.dev/advisories/keio-corporation-japan-ransomware-disrupts-hospitality-and-payment/https://vulnpocalypse.dev/advisories/keio-corporation-japan-ransomware-disrupts-hospitality-and-payment/Sat, 26 Sep 2026 12:00:00 +0000Keio: "In the early hours of September 26, 2026, we confirmed a ransomware attack on our group's servers." Some business systems, reportedly payments and...breachhttps://vulnpocalypse.dev/advisories/ikegami-tsushinki-servers-encrypted-data-appearing-to-be-its-own/https://vulnpocalypse.dev/advisories/ikegami-tsushinki-servers-encrypted-data-appearing-to-be-its-own/Thu, 24 Sep 2026 12:00:00 +0000Ikegami said it received outside information on 21 Sep of a possible cyberattack.breachhttps://vulnpocalypse.dev/advisories/japan-digital-agency-government-solution-service-vpn-flaw-exposes/https://vulnpocalypse.dev/advisories/japan-digital-agency-government-solution-service-vpn-flaw-exposes/Fri, 11 Sep 2026 12:00:00 +0000The Digital Agency said a third party breached the shared government IT platform GSS "by exploiting a vulnerability in a network connection device (VPN)".breachhttps://vulnpocalypse.dev/advisories/nichirei-japanese-cold-chain-logistics-and-frozen-food-systems/https://vulnpocalypse.dev/advisories/nichirei-japanese-cold-chain-logistics-and-frozen-food-systems/Fri, 17 Jul 2026 12:00:00 +0000Nichirei's systems were hit on 13 Jul 2026 and disconnected; operations at Nichirei Logistics Group refrigerated warehouses and Nichirei Foods shipping...breachhttps://vulnpocalypse.dev/advisories/aflac-japan-438-million-customers-policy-and-bank-data-accessed/https://vulnpocalypse.dev/advisories/aflac-japan-438-million-customers-policy-and-bank-data-accessed/Tue, 30 Jun 2026 12:00:00 +0000Aflac's SEC filing (30 Jun) says a third party "unlawfully accessed certain of Aflac Japan's systems" from 15 to 25 Jun 2026.breachhttps://vulnpocalypse.dev/advisories/kddi-and-five-other-japanese-isps-zero-day-in-third-party-software-on/https://vulnpocalypse.dev/advisories/kddi-and-five-other-japanese-isps-zero-day-in-third-party-software-on/Sun, 28 Jun 2026 12:00:00 +0000KDDI said attackers breached an email system it operates for itself and five ISPs (STNet, JCOM, Chubu Telecommunications, NIFTY, BIGLOBE) on 16 May 2026.breach