{"updated":"2026-10-16","name":{"ja":"日本のサイバー被害ダッシュボード","en":"Japan cyber incident dashboard"},"publisher":"株式会社Bekito (Bekito Inc.)","license":{"ja":"出典（Bekito と各一次資料）を明記すれば引用・再利用できます。","en":"Free to quote and reuse with attribution to Bekito and the primary sources."},"population":{"value":122838000,"date":"2026-04-01","source":{"publisher":"総務省統計局","title":"人口推計（2026年9月報）","url":"https://www.stat.go.jp/data/jinsui/new.html","date":"2026-09-24"}},"rates":{"probes":{"per_day":13687,"label":{"ja":"IPアドレス1つあたり1日13,687件（警察庁・2026年上半期）","en":"13,687 per IP address per day (NPA, H1 2026)"},"source":{"publisher":"警察庁","title":"令和8年上半期におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R8kami/R08_kami_cyber_jousei.pdf","date":"2026-09-10"}},"nicter":{"per_day":1920547945.2054794,"label":{"ja":"年間約7,010億パケット（NICTER・2025年）","en":"about 701 billion packets a year (NICTER, 2025)"},"source":{"publisher":"NICT","title":"NICTER観測レポート2025","url":"https://csl.nict.go.jp/report/NICTER_report_2025.pdf","date":"2026-02"}},"phishing":{"per_day":4706.969863013699,"label":{"ja":"直近12か月（2025年9月〜2026年8月）で1,718,044件","en":"1,718,044 in the last 12 months (Sep 2025 – Aug 2026)"},"source":{"publisher":"フィッシング対策協議会","title":"フィッシング報告状況","url":"https://www.antiphishing.jp/report/monthly/202608.html","date":"2026-09-18"}}},"series":[{"id":"npa_ransomware","title":{"ja":"ランサムウェア被害の報告件数（半期）","en":"Ransomware cases reported to police (half-year)"},"unit":{"ja":"件","en":"cases"},"tile_compare":"prev","compare_from":"2021H1","points":[{"p":"2020H2","v":21},{"p":"2021H1","v":61},{"p":"2021H2","v":85},{"p":"2022H1","v":114},{"p":"2022H2","v":116},{"p":"2023H1","v":103},{"p":"2023H2","v":94},{"p":"2024H1","v":114},{"p":"2024H2","v":108},{"p":"2025H1","v":116},{"p":"2025H2","v":110},{"p":"2026H1","v":123}],"note":{"ja":"2020年下半期に集計開始。2026年上半期の123件は半期として過去最多。暗号化をしない「ノーウェアランサム」（同期9件）は含まない。","en":"Counting began in H2 2020. 123 in H1 2026 is the highest half-year on record. Excludes encryption-less extortion (9 in the same period)."},"source":{"publisher":"警察庁","title":"令和8年上半期におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R8kami/R08_kami_cyber_jousei.pdf","date":"2026-09-10"}},{"id":"npa_probes","title":{"ja":"IPアドレス1つに届く不審なアクセス（上半期・1日あたり）","en":"Suspicious probes per IP address per day (first halves)"},"unit":{"ja":"件/日","en":"/day"},"tile_compare":"prev","points":[{"p":"2021H1","v":6347.4},{"p":"2022H1","v":7800.3},{"p":"2023H1","v":8219.0},{"p":"2024H1","v":9824.7},{"p":"2025H1","v":9085.4},{"p":"2026H1","v":13687}],"note":{"ja":"警察庁のセンサーで検知。99.6%が海外から。","en":"Detected by NPA sensors; 99.6% from abroad."},"source":{"publisher":"警察庁","title":"令和8年上半期におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R8kami/R08_kami_cyber_jousei.pdf","date":"2026-09-10"}},{"id":"npa_probes_annual","title":{"ja":"IPアドレス1つに届く不審なアクセス（年平均・1日あたり）","en":"Suspicious probes per IP address per day (annual)"},"unit":{"ja":"件/日","en":"/day"},"points":[{"p":"2014","v":491.6},{"p":"2015","v":729.3},{"p":"2016","v":1692.0},{"p":"2017","v":1893.0},{"p":"2018","v":2752.8},{"p":"2019","v":4192.0},{"p":"2020","v":6506.4},{"p":"2021","v":7335.0},{"p":"2022","v":7707.9},{"p":"2023","v":9144.6},{"p":"2024","v":9520.2},{"p":"2025","v":9605.7}],"note":{"ja":"2026年上半期は13,687件/日（前年同期比50.7%増）。","en":"H1 2026: 13,687 a day, up 50.7% year on year."},"source":{"publisher":"警察庁","title":"令和7年におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R7/R07_cyber_jousei.pdf","date":"2026-03"}},{"id":"phishing","title":{"ja":"フィッシングの報告件数（年）","en":"Phishing reports (per year)"},"unit":{"ja":"件","en":"reports"},"points":[{"p":"2019","v":55787},{"p":"2020","v":224676},{"p":"2021","v":526504},{"p":"2022","v":968832},{"p":"2023","v":1196390},{"p":"2024","v":1718036},{"p":"2025","v":2454297}],"note":{"ja":"2026年は1〜8月で87万9,827件と、前年同期（161万6,080件）より減っています。","en":"Jan–Aug 2026: 879,827, down from 1,616,080 a year earlier."},"source":{"publisher":"フィッシング対策協議会","title":"フィッシング報告状況（月次報告書）","url":"https://www.antiphishing.jp/report/monthly/202512.html","date":"2026-01"}},{"id":"bank_fraud","title":{"ja":"ネットバンキングの不正送金 被害額（年）","en":"Online-banking fraud losses (per year)"},"unit":{"ja":"億円","en":"¥100M"},"format":"yen_oku","points":[{"p":"2019","v":25.21},{"p":"2020","v":11.33},{"p":"2021","v":8.2},{"p":"2022","v":15.195},{"p":"2023","v":87.3},{"p":"2024","v":86.9},{"p":"2025","v":103.97}],"note":{"ja":"2025年は過去最多の約104億円。うち法人口座が約47億円（ボイスフィッシング）。2026年上半期は約20.7億円。","en":"2025 was a record ¥10.4bn, ¥4.7bn of it from company accounts (voice phishing). H1 2026: ¥2.07bn."},"source":{"publisher":"警察庁","title":"令和7年におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R7/R07_cyber_jousei.pdf","date":"2026-03"}},{"id":"tsr_leaks","title":{"ja":"上場企業の個人情報漏えい・紛失事故（年）","en":"Personal-data leaks disclosed by listed companies (per year)"},"unit":{"ja":"件","en":"incidents"},"points":[{"p":"2012","v":71},{"p":"2013","v":107},{"p":"2014","v":70},{"p":"2015","v":87},{"p":"2016","v":89},{"p":"2017","v":90},{"p":"2018","v":85},{"p":"2019","v":86},{"p":"2020","v":103},{"p":"2021","v":137},{"p":"2022","v":165},{"p":"2023","v":175},{"p":"2024","v":189},{"p":"2025","v":180}],"note":{"ja":"2025年は64.4%がウイルス感染・不正アクセスによるもの。100万件以上の漏えいは2026年10月5日時点で既に10件（2025年は通年6件）。","en":"In 2025, 64.4% were caused by malware or intrusion. Leaks of a million records or more: 10 by 5 Oct 2026, versus 6 in all of 2025."},"source":{"publisher":"東京商工リサーチ","title":"上場企業の「個人情報漏えい・紛失」事故","url":"https://www.tsr-net.co.jp/data/detail/1202348_1527.html","date":"2026-01-30"}},{"id":"jpcert","title":{"ja":"JPCERT/CCへのインシデント報告（年度）","en":"Incident reports to JPCERT/CC (fiscal year)"},"unit":{"ja":"件","en":"reports"},"points":[{"p":"FY2015","v":17342},{"p":"FY2016","v":15954},{"p":"FY2017","v":18141},{"p":"FY2018","v":16398},{"p":"FY2019","v":20147},{"p":"FY2020","v":46942},{"p":"FY2021","v":50801},{"p":"FY2022","v":53921},{"p":"FY2023","v":65690},{"p":"FY2024","v":46038},{"p":"FY2025","v":74096}],"note":{"ja":"年度は4月〜翌3月。2025年度は前年度比61%増。2026年度第1四半期（4〜6月）は14,056件で前年同期比3%減（四半期レポート、2026年7月16日）。","en":"Fiscal years run April to March. FY2025 was up 61% on FY2024. Q1 FY2026 (Apr–Jun): 14,056, down 3% year on year (quarterly report, 16 Jul 2026)."},"source":{"publisher":"JPCERT/CC","title":"四半期レポート［2026年1月1日～3月31日］","url":"https://www.jpcert.or.jp/qr/2026/QR_FY2025-Q4.pdf","date":"2026-04-16"}},{"id":"nicter","title":{"ja":"NICTERが観測した攻撃関連の通信（センサー1台あたり・年）","en":"Attack-related packets per NICTER sensor address (per year)"},"unit":{"ja":"パケット","en":"packets"},"points":[{"p":"2015","v":245540},{"p":"2016","v":527888},{"p":"2017","v":578750},{"p":"2018","v":806877},{"p":"2019","v":1231331},{"p":"2020","v":1849817},{"p":"2021","v":1747685},{"p":"2022","v":1833012},{"p":"2023","v":2260132},{"p":"2024","v":2427977},{"p":"2025","v":2504680}],"note":{"ja":"使われていないIPアドレス（ダークネット）に届いた通信。2025年は観測開始以来最多。","en":"Traffic reaching unused (darknet) addresses. 2025 was the highest since observation began."},"source":{"publisher":"NICT","title":"NICTER観測レポート2025","url":"https://csl.nict.go.jp/report/NICTER_report_2025.pdf","date":"2026-02"}},{"id":"securities","title":{"ja":"証券口座の不正取引（月別）","en":"Unauthorised trades in hijacked brokerage accounts (monthly)"},"unit":{"ja":"件","en":"trades"},"compare":"peak","points":[{"p":"2025-01","v":69},{"p":"2025-02","v":34},{"p":"2025-03","v":935},{"p":"2025-04","v":3033},{"p":"2025-05","v":2440},{"p":"2025-06","v":920},{"p":"2025-07","v":930},{"p":"2025-08","v":654},{"p":"2025-09","v":196},{"p":"2025-10","v":377},{"p":"2025-11","v":157},{"p":"2025-12","v":116},{"p":"2026-01","v":146},{"p":"2026-02","v":171},{"p":"2026-03","v":121},{"p":"2026-04","v":101},{"p":"2026-05","v":106},{"p":"2026-06","v":104},{"p":"2026-07","v":5},{"p":"2026-08","v":25},{"p":"2026-09","v":2}],"note":{"ja":"暫定値。2025年1月〜2026年9月で不正アクセス19,252件、不正取引10,642件。","en":"Provisional. Jan 2025 – Sep 2026: 19,252 unauthorised logins and 10,642 unauthorised trades."},"source":{"publisher":"金融庁","title":"インターネット取引サービスへの不正アクセス・不正取引の発生状況","url":"https://www.fsa.go.jp/ordinary/chuui/chuui_phishing/20261009.pdf","date":"2026-10-09"}}],"breakdowns":{"vectors":{"title":{"ja":"ランサムウェアの侵入口（2025年）","en":"How ransomware got in (2025)"},"n":92,"rows":[{"label":{"ja":"VPN機器","en":"VPN devices"},"v":66.3,"count":61,"cls":"ransomware"},{"label":{"ja":"リモートデスクトップ","en":"Remote desktop"},"v":20.7,"count":19,"cls":null},{"label":{"ja":"その他","en":"Other"},"v":10.9,"count":10,"cls":null},{"label":{"ja":"不審なメール・添付ファイル","en":"Suspicious email or attachment"},"v":2.2,"count":2,"cls":null}],"note":{"ja":"侵入口が分かった92件の内訳。2026年上半期も約5割がVPN機器。","en":"Of the 92 cases with a known entry point. About half again in H1 2026."},"source":{"publisher":"警察庁","title":"令和7年におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R7/R07_cyber_jousei.pdf","date":"2026-03"}},"size":{"title":{"ja":"被害に遭った組織の規模（2026年上半期）","en":"Who was hit, by size (H1 2026)"},"n":123,"rows":[{"label":{"ja":"中小企業","en":"Small & mid-sized companies"},"v":64.2,"count":79,"cls":"ransomware"},{"label":{"ja":"大企業","en":"Large companies"},"v":25.2,"count":31,"cls":null},{"label":{"ja":"団体など","en":"Other organisations"},"v":10.6,"count":13,"cls":null}],"note":{"ja":"ランサムウェア被害123件の内訳。","en":"All 123 ransomware cases."},"source":{"publisher":"警察庁","title":"令和8年上半期におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R8kami/R08_kami_cyber_jousei.pdf","date":"2026-09-10"}},"sector":{"title":{"ja":"業種別（2026年上半期）","en":"By sector (H1 2026)"},"n":123,"rows":[{"label":{"ja":"製造業","en":"Manufacturing"},"v":30.1,"count":37,"cls":"ransomware"},{"label":{"ja":"卸売・小売業","en":"Wholesale & retail"},"v":12.2,"count":15,"cls":null},{"label":{"ja":"不動産・物品賃貸業","en":"Real estate & rental"},"v":7.3,"count":9,"cls":null},{"label":{"ja":"医療・福祉","en":"Healthcare & welfare"},"v":7.3,"count":9,"cls":null},{"label":{"ja":"情報通信業","en":"Information & comms"},"v":7.3,"count":9,"cls":null},{"label":{"ja":"建設業","en":"Construction"},"v":6.5,"count":8,"cls":null},{"label":{"ja":"その他","en":"Other"},"v":29.3,"count":36,"cls":null}],"note":{"ja":"ランサムウェア被害123件の内訳。","en":"All 123 ransomware cases."},"source":{"publisher":"警察庁","title":"令和8年上半期におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R8kami/R08_kami_cyber_jousei.pdf","date":"2026-09-10"}},"recovery":{"title":{"ja":"元に戻るまでの期間（2025年）","en":"Time to recover (2025)"},"n":107,"rows":[{"label":{"ja":"1週間未満","en":"Under a week"},"v":27.1,"count":29,"cls":null},{"label":{"ja":"1週間〜1か月","en":"1 week – 1 month"},"v":29.0,"count":31,"cls":null},{"label":{"ja":"1〜2か月","en":"1–2 months"},"v":14.0,"count":15,"cls":"ransomware"},{"label":{"ja":"2か月以上","en":"2 months or more"},"v":6.5,"count":7,"cls":"ransomware"},{"label":{"ja":"調査時点でまだ復旧中","en":"Still recovering when asked"},"v":23.4,"count":25,"cls":"ransomware"}],"note":{"ja":"回答107件。2026年上半期は、1か月未満で戻れたのは5割弱。","en":"107 responses. In H1 2026 fewer than half recovered within a month."},"source":{"publisher":"警察庁","title":"令和8年上半期におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R8kami/R08_kami_cyber_jousei.pdf","date":"2026-09-10"}},"cost":{"title":{"ja":"調査・復旧にかかった費用（2025年）","en":"Cost of investigation and recovery (2025)"},"n":89,"rows":[{"label":{"ja":"1億円以上","en":"¥100M or more"},"v":5.6,"count":5,"cls":"ransomware"},{"label":{"ja":"5,000万〜1億円","en":"¥50M – 100M"},"v":10.1,"count":9,"cls":"ransomware"},{"label":{"ja":"1,000万〜5,000万円","en":"¥10M – 50M"},"v":36.0,"count":32,"cls":"ransomware"},{"label":{"ja":"500万〜1,000万円","en":"¥5M – 10M"},"v":10.1,"count":9,"cls":null},{"label":{"ja":"100万〜500万円","en":"¥1M – 5M"},"v":20.2,"count":18,"cls":null},{"label":{"ja":"100万円未満","en":"Under ¥1M"},"v":18.0,"count":16,"cls":null}],"note":{"ja":"回答89件。1,000万円以上が51.7%。2026年上半期は6割。","en":"89 responses. 51.7% spent ¥10M or more; in H1 2026, 60%."},"source":{"publisher":"警察庁","title":"令和8年上半期におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R8kami/R08_kami_cyber_jousei.pdf","date":"2026-09-10"}},"backup":{"title":{"ja":"バックアップは、あったのに（2025年）","en":"They had backups, but… (2025)"},"n":null,"rows":[{"label":{"ja":"バックアップを取っていた","en":"Had backups"},"v":90.5,"count":105,"cls":null},{"label":{"ja":"そこから元に戻せた","en":"Could restore from them"},"v":20.2,"count":20,"cls":"ransomware"}],"note":{"ja":"取っていた：回答116件中105件。戻せた：回答99件中20件。戻せなかった主な理由は「バックアップも暗号化・削除された」。","en":"Had backups: 105 of 116 responses. Could restore: 20 of 99. The main reason was that the backups were encrypted or deleted too."},"source":{"publisher":"警察庁","title":"令和8年上半期におけるサイバー空間をめぐる脅威の情勢等について","url":"https://www.npa.go.jp/publications/statistics/cybersecurity/data/R8kami/R08_kami_cyber_jousei.pdf","date":"2026-09-10"}}},"timeline":{"from":"2024-01-01","to":"2026-10-31"},"wave":{"from":"2026-09-15","to":"2026-10-16","axis_to":"2026-10-17","title":{"ja":"9月中旬からの不正アクセス・漏えいの公表","en":"Intrusions and leaks disclosed since mid-September"},"annotations":[{"date":"2026-10-01","n":1,"gov":true,"label":{"ja":"能動的サイバー防御が始まる","en":"Active cyber defence begins"}},{"date":"2026-10-08","n":2,"gov":true,"label":{"ja":"JPCERT/CCが注意喚起","en":"JPCERT/CC alert"}},{"date":"2026-10-09","n":3,"gov":true,"label":{"ja":"IPAが緊急の対策を公表","en":"IPA urgent measures"}},{"date":"2026-10-15","n":4,"gov":true,"label":{"ja":"攻撃にAIの使用を確認","en":"AI use by attackers confirmed"}},{"date":"2026-10-16","n":5,"gov":true,"label":{"ja":"IPAが特別相談窓口","en":"IPA opens special help desk"}}]},"incidents":[{"id":"47c7a5aa53","date":"2023-07-04","occurred":null,"disclosed":null,"org":{"ja":"名古屋港運協会（名古屋港統一ターミナルシステム NUTS）","en":"Nagoya Harbor Transportation Association (Nagoya United Terminal System, NUTS)"},"sector":"logistics_transport","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"全ターミナルでコンテナ搬出入が約2日半停止（7/4 6:30〜7/6 18:15）、37隻の荷役が最大約24時間遅延","en":"Truck container in/out halted at all Nagoya Port terminals ~2.5 days (06:30 Jul 4 to last terminal 18:15 Jul 6); 37 vessels' cargo schedules delayed up to ~24h"},"vector":{"ja":"リモート接続機器の脆弱性が悪用されたとみられる（ログも暗号化され経路は未確定との報道あり）","en":"Port association report: a vulnerability in a remote-connection device is believed to have been used; later reporting says the route could not be confirmed because logs were also encrypted"},"actor":"LockBit (per the ransom note, as reported; not formally attributed)","summary":{"ja":"名古屋港のコンテナ作業を一元管理するシステムがランサムウェアに感染し、全ターミナルでトレーラーによるコンテナ搬出入が約2日半止まった。バックアップからもマルウェアが見つかり、復旧が遅れた。","en":"Ransomware hit the system that runs all container operations at Nagoya Port, halting truck traffic at every terminal for about two and a half days. Malware was also found in the backups, which slowed recovery."},"sources":[{"title":"名古屋港のランサムウェア感染事件、港運協会らが詳細な経緯と今後の対応を報告","publisher":"INTERNET Watch","date":"2023-08-04","url":"https://internet.watch.impress.co.jp/docs/news/1521097.html"},{"title":"名古屋港のランサム被害、約3日で復旧もログまで暗号化され感染経路はいまだ不明","publisher":"日経クロステック","date":"2023-12-01","url":"https://xtech.nikkei.com/atcl/nxt/column/18/01157/112900099/"},{"title":"名古屋港のシステムを停止させたランサムウェア「LockBit」とは？","publisher":"ITmedia NEWS","date":"2023-07-18","url":"https://www.itmedia.co.jp/news/articles/2307/18/news042.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"名古屋港運協会","en":"Nagoya Harbor Transportation Association"},"group":"ransomware"},{"id":"c0e81bccd4","date":"2024-04-01","occurred":"2024-03-30","disclosed":"2024-04-01","org":{"ja":"HOYA株式会社","en":"HOYA Corporation"},"sector":"manufacturing","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"国内外拠点でレンズの受注・製造が停止（期間は非公表）","en":"Lens ordering and manufacturing halted at domestic and overseas sites (duration not disclosed)"},"vector":null,"actor":"Hunters International (per BleepingComputer; reported US$10M ransom demand and a claim of ~2TB / 1.7M files)","summary":{"ja":"光学機器大手HOYAの国内外拠点でシステム障害が起き、レンズの受注・製造が止まった。ランサムウェアグループHunters Internationalが1,000万ドルを要求したと報じられた。","en":"A system outage across HOYA's domestic and overseas sites halted lens ordering and manufacturing. The ransomware group Hunters International reportedly demanded US$10 million."},"sources":[{"title":"レンズの受注や製造を停止 ～ HOYAグループで不正アクセスに起因する可能性が高いシステム障害","publisher":"ScanNetSecurity","date":"2024-04-10","url":"https://scan.netsecurity.ne.jp/article/2024/04/10/50853.html"},{"title":"Optics giant Hoya hit with $10 million ransomware demand","publisher":"BleepingComputer","date":"2024-04-11","url":"https://www.bleepingcomputer.com/news/security/optics-giant-hoya-hit-with-10-million-ransomware-demand/"}],"confidence":"medium","wave":false,"landmark":true,"short":{"ja":"HOYA","en":"HOYA"},"group":"ransomware"},{"id":"dc485dcc7c","date":"2024-05-26","occurred":null,"disclosed":null,"org":{"ja":"株式会社イセトー","en":"Iseto Corporation"},"sector":"services","type":"ransomware","via_vendor":false,"records":3076477,"affected_orgs":41,"cost_jpy":null,"outage":null,"vector":{"ja":"VPN","en":"VPN"},"actor":"8Base (per Iseto's report to Tokushima Prefecture)","summary":{"ja":"印刷・情報処理の受託企業イセトーがランサムウェア被害を受け、自治体や企業から預かった帳票データが盗まれ、リークサイトに公開された。個人情報保護委員会の集計では、委託元は民間32・行政9団体（再委託元を含め約100団体）、計307万人超に及んだ。","en":"Ransomware hit Iseto, a printing and data-processing contractor, and form data it held for municipalities and companies was stolen and posted on a leak site. The PPC counted 3.08 million people across 32 private and 9 public clients, or about 100 organisations including indirect clients."},"sources":[{"title":"イセトーがランサムウェア攻撃に関する調査結果を発表","publisher":"INTERNET Watch","date":"2024-10-11","url":"https://internet.watch.impress.co.jp/docs/news/1630690.html"},{"title":"業務委託のイセトー、300万人分の個人データを漏洩　個情委の行政指導で不備が露呈","publisher":"日経クロステック","date":"2025-09-26","url":"https://xtech.nikkei.com/atcl/nxt/column/18/01157/092500143/"},{"title":"徳島県、個人情報20万件漏えいの可能性　委託先・イセトーのランサムウェア被害で","publisher":"ITmedia NEWS","date":"2024-07-04","url":"https://www.itmedia.co.jp/news/articles/2407/04/news126.html"},{"title":"豊田市でも42万人分漏えいか　委託先・イセトーのランサムウェア被害、拡大続く","publisher":"ITmedia NEWS","date":"2024-07-04","url":"https://www.itmedia.co.jp/news/article/2407/04/1240704184/"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"イセトー","en":"Iseto"},"group":"ransomware"},{"id":"d5ec09ac8e","date":"2024-05-31","occurred":null,"disclosed":"2024-05-31","org":{"ja":"株式会社DMM Bitcoin","en":"DMM Bitcoin Co., Ltd."},"sector":"finance","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":48200000000,"outage":{"ja":"DMM Bitcoinは事業から撤退し、口座と預かり資産は2025年3月頃にSBI VCトレードへ移管予定","en":"DMM Bitcoin exited the business; accounts and deposited assets slated to move to SBI VC Trade around March 2025"},"vector":{"ja":"ウォレット委託先Gincoの社員を偽の採用試験でだまし、窃取したセッション情報で取引依頼を改ざん","en":"Social engineering of an employee at wallet-software vendor Ginco (fake recruiter, malicious 'pre-employment test' script on GitHub), then stolen session cookies used to tamper with DMM's transaction requests"},"actor":"TraderTraitor (North Korea-linked; part of Lazarus Group per Impress Watch); attributed by the NPA with the FBI on 2024-12-24","summary":{"ja":"暗号資産交換業者DMM Bitcoinから4,502.9BTC（約482億円相当）が不正流出した。警察庁はFBIなどとともに、北朝鮮系「TraderTraitor」がウォレット委託先の社員を偽の採用試験でだまして侵入したと特定した。","en":"Attackers stole 4,502.9 BTC (worth about ¥48.2 billion) from crypto exchange DMM Bitcoin. Japan's NPA, with the FBI, attributed it to North Korea-linked TraderTraitor, which tricked an employee of a wallet vendor with a fake hiring test."},"sources":[{"title":"DMMのビットコイン流出、北朝鮮の犯行グループが関与","publisher":"Impress Watch","date":"2024-12-24","url":"https://www.watch.impress.co.jp/docs/news/1650273.html"},{"title":"北朝鮮を背景とするサイバー攻撃グループTraderTraitorによる暗号資産関連事業者を標的としたサイバー攻撃について","publisher":"警察庁","date":"2024-12-24","url":"https://www.npa.go.jp/bureau/cyber/koho/caution/caution20241224.html"}],"confidence":"medium","wave":false,"landmark":true,"short":{"ja":"DMM Bitcoin","en":"DMM Bitcoin"},"group":"access"},{"id":"e370afc7f7","date":"2024-06-09","occurred":"2024-06-08","disclosed":"2024-06-09","org":{"ja":"株式会社KADOKAWA／株式会社ドワンゴ（ニコニコ）","en":"KADOKAWA Corporation / Dwango (Niconico)"},"sector":"media_entertainment","type":"ransomware","via_vendor":false,"records":254241,"affected_orgs":null,"cost_jpy":2413000000,"outage":{"ja":"ニコニコの主要サービスが約2カ月停止（2024/6/8停止、8/5再開）","en":"Niconico services down ~2 months (stopped 2024-06-08; main services relaunched 2024-08-05)"},"vector":{"ja":"フィッシング等で従業員のアカウント情報が窃取され社内に侵入された疑い（経路は未確定）","en":"Suspected phishing-type theft of an employee's account credentials, then used to enter the internal network (route and method not confirmed by KADOKAWA)"},"actor":"BlackSuit (claimed 2024-06-27; said it took ~1.5TB)","summary":{"ja":"KADOKAWAグループのデータセンターがランサムウェアを含む大規模攻撃を受け、「ニコニコ」の主要サービスが約2カ月停止した。学校法人の生徒やクリエイター、取引先など25万4,241人分の個人情報が漏えいし、24億円超の特別損失を計上した。","en":"A large attack including ransomware hit KADOKAWA's data centre and took Niconico's main services offline for about two months. Data on 254,241 people (school students, creators, partners, staff) leaked, and the company booked a special loss of over ¥2.4 billion."},"sources":[{"title":"ランサムウェア攻撃による情報漏洩に関するお知らせ","publisher":"KADOKAWA","date":"2024-08-05","url":"https://www.kadokawa.co.jp/topics/12088/"},{"title":"KADOKAWAがランサムウェアグループの「犯行リスト」に入った","publisher":"ITmedia NEWS","date":"2024-06-28","url":"https://www.itmedia.co.jp/news/articles/2406/28/news130.html"},{"title":"ニコニコ動画、8月5日新バージョンで再開　補償内容も確定","publisher":"Impress Watch","date":"2024-07-26","url":"https://www.watch.impress.co.jp/docs/news/1611696.html"},{"title":"KADOKAWA、大規模サイバー攻撃による影響を織り込んだ業績予想の修正を発表","publisher":"gamebiz","date":"2024-08-14","url":"https://gamebiz.jp/news/390793"},{"title":"KADOKAWA、25年3月期決算は最終利益35%減の73億円","publisher":"gamebiz","date":"2025-05-08","url":"https://gamebiz.jp/news/405346"},{"title":"KADOKAWAがランサム攻撃で「ニコニコ」停止、身代金を支払うもデータ復旧できず","publisher":"日経クロステック","date":"2024-07-05","url":"https://xtech.nikkei.com/atcl/nxt/column/18/01157/070400114/"},{"title":"2024 cyberattack on Kadokawa and Niconico","publisher":"Wikipedia","date":"2026-10-16","url":"https://en.wikipedia.org/wiki/2024_cyberattack_on_Kadokawa_and_Niconico"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"KADOKAWA／ドワンゴ","en":"KADOKAWA / Dwango"},"group":"ransomware"},{"id":"15d0091783","date":"2024-06-11","occurred":"2024-05-19","disclosed":"2024-06-11","org":{"ja":"地方独立行政法人岡山県精神科医療センター","en":"Okayama Prefectural Psychiatric Medical Center"},"sector":"healthcare","type":"ransomware","via_vendor":false,"records":40000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"2024年5月19日から電子カルテを含む総合情報システムが停止","en":"Integrated hospital information system including electronic medical records disrupted from 2024-05-19"},"vector":null,"actor":null,"summary":{"ja":"岡山県精神科医療センターがランサムウェアとみられる攻撃を受け、電子カルテを含む情報システムが停止した。最大約4万人分の患者情報が流出した可能性がある。","en":"A suspected ransomware attack took down the Okayama Prefectural Psychiatric Medical Center's hospital systems, including electronic medical records. Data on up to about 40,000 patients may have leaked."},"sources":[{"title":"岡山県精神科医療センターへのランサムウェア攻撃、最大約 40,000 人分の患者情報が流出した可能性","publisher":"ScanNetSecurity","date":"2024-07-22","url":"https://scan.netsecurity.ne.jp/article/2024/07/22/51344.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"地方岡山県精神科医療センター","en":"Okayama Prefectural Psychiatric Medical Center"},"group":"ransomware"},{"id":"16d24f509b","date":"2024-07-05","occurred":null,"disclosed":"2024-07-05","org":{"ja":"国立研究開発法人宇宙航空研究開発機構（JAXA）","en":"Japan Aerospace Exploration Agency (JAXA)"},"sector":"government","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"業務用イントラネット接続用VPN機器の脆弱性を悪用し、窃取したアカウント情報でMicrosoft 365にも侵入","en":"Vulnerability in a VPN device used for remote access to the business intranet; stolen account credentials then used to access Microsoft 365"},"actor":null,"summary":{"ja":"JAXAの業務用イントラネットがVPN機器の脆弱性を突かれて侵入され、盗まれたアカウント情報でMicrosoft 365にも不正アクセスされた。複数の未知のマルウェアが使われ、外部機関から通報されるまで検知できなかった。","en":"Attackers broke into JAXA's business intranet through a VPN device flaw and used stolen credentials to get into Microsoft 365. Several previously unknown malware tools were used, and JAXA did not detect the intrusion until an outside body alerted it."},"sources":[{"title":"JAXA、2023年10月に発生したサイバー攻撃について説明","publisher":"INTERNET Watch","date":"2024-07-08","url":"https://internet.watch.impress.co.jp/docs/news/1606208.html"},{"title":"JAXA への不正アクセスによる情報漏えい、未知のマルウェア使用で侵害の検知を困難に","publisher":"ScanNetSecurity","date":"2024-07-18","url":"https://scan.netsecurity.ne.jp/article/2024/07/18/51325.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"国立研究開発法人宇宙航空研究開発機構","en":"Japan Aerospace Exploration Agency"},"group":"access"},{"id":"e30637bbc0","date":"2024-07-17","occurred":"2024-07-09","disclosed":"2024-07-17","org":{"ja":"東京ガスエンジニアリングソリューションズ（TGES）／東京ガス","en":"Tokyo Gas Engineering Solutions (TGES) / Tokyo Gas"},"sector":"infrastructure_energy","type":"unauthorized_access","via_vendor":false,"records":4160000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"TGESのネットワークへの不正アクセス（手口は非公表）","en":"Unauthorised access to TGES's network (method not stated)"},"actor":null,"summary":{"ja":"東京ガス子会社TGESのネットワークに不正アクセスがあり、同社と東京ガス法人部門の顧客などに関する約416万人分の個人情報が流出した可能性がある。","en":"Attackers got into the network of Tokyo Gas subsidiary TGES, and data on about 4.16 million people, mostly customers of TGES and Tokyo Gas's corporate business, may have leaked."},"sources":[{"title":"東京ガスエンジニアリングソリューションズのネットワークに不正アクセス、約 416 万人分の個人情報が流出した可能性","publisher":"ScanNetSecurity","date":"2024-07-25","url":"https://scan.netsecurity.ne.jp/article/2024/07/25/51367.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"東京ガスエンジニアリングソリューションズ（TGES）／東京ガス","en":"Tokyo Gas Engineering Solutions (TGES) / Tokyo Gas"},"group":"access"},{"id":"e3d6e06e13","date":"2024-09-12","occurred":null,"disclosed":null,"org":{"ja":"株式会社関通","en":"Kantsu Co., Ltd."},"sector":"logistics_transport","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":1700000000,"outage":{"ja":"クラウドトーマス等の倉庫システムが停止、復旧に約50日、2024年9〜12月は新規営業を停止","en":"Warehouse systems including the cloud WMS 'クラウドトーマス' down; ~50 days to restore systems; new-business sales halted Sep–Dec 2024"},"vector":{"ja":"未確定。2024年7〜8月から侵入されており、VPNが同社のリモート接続経路だった","en":"Not confirmed; intruders had been present since July–August 2024; VPN was the company's remote-access path"},"actor":null,"summary":{"ja":"物流代行の関通がランサムウェア攻撃を受け、倉庫管理システム「クラウドトーマス」などが止まり、荷主の出荷が停止・遅延した。システム復旧に約50日かかった。","en":"Ransomware hit logistics outsourcer Kantsu, knocking out its cloud warehouse-management system and halting or delaying shipments for its clients. Restoring systems took about 50 days."},"sources":[{"title":"物流企業を襲ったランサムウェア攻撃 - その教訓を生かし、新事業を展開","publisher":"マイナビニュース TECH+","date":"2026-06-22","url":"https://news.mynavi.jp/article/20260622-4554477/"},{"title":"関通、不正アクセスの特損計上で最終8.5億円赤字","publisher":"LogiToday","date":"2025-04-11","url":"https://www.logi-today.com/757833"},{"title":"関通へのランサムウェア攻撃「ガンバ大阪公式オンラインショップ」一時閉鎖","publisher":"ScanNetSecurity","date":"2024-10-04","url":"https://scan.netsecurity.ne.jp/article/2024/10/04/51720.html"}],"confidence":"medium","wave":false,"landmark":true,"short":{"ja":"関通","en":"Kantsu"},"group":"ransomware"},{"id":"5f6f0e9e55","date":"2024-10-08","occurred":"2024-10-05","disclosed":"2024-10-08","org":{"ja":"カシオ計算機株式会社","en":"Casio Computer Co., Ltd."},"sector":"manufacturing","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"一部サービスが停止（範囲・期間は確認した資料に記載なし）","en":"Some Casio services suspended (scope and duration not stated in opened sources)"},"vector":{"ja":"海外からのサーバへの不正アクセス（手口は非公表）","en":"Unauthorised access to servers from overseas (method not stated)"},"actor":null,"summary":{"ja":"カシオ計算機がランサムウェア攻撃を受けてシステムが使えなくなり、従業員・取引先・一部顧客の個人情報や社内文書が漏えいした。同社は不当な要求には一切応じないとした。","en":"Ransomware made Casio's systems unusable and leaked personal data of employees, partners and some customers, plus internal documents. Casio said it would not give in to any improper demands."},"sources":[{"title":"当社におけるランサムウェア被害に伴う サービスの一部停止と情報漏えいに関するお知らせ","publisher":"カシオ計算機","date":"2024-10-11","url":"https://www.casio.co.jp/release/2024/1011-incident/"},{"title":"カシオ計算機へのランサムウェア攻撃「不当な要求には一切応じず」","publisher":"ScanNetSecurity","date":"2025-01-20","url":"https://scan.netsecurity.ne.jp/article/2025/01/20/52184.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"カシオ計算機","en":"Casio Computer"},"group":"ransomware"},{"id":"84d980dbb3","date":"2024-12-26","occurred":null,"disclosed":"2024-12-26","org":{"ja":"日本航空株式会社（JAL）","en":"Japan Airlines (JAL)"},"sector":"logistics_transport","type":"ddos","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"7時24分頃〜14時過ぎに障害、71便が30分以上遅延・4便欠航、当日便の航空券販売を停止","en":"Systems disrupted from ~07:24 until shortly after 14:00; 71 flights delayed 30+ min and 4 cancelled that day; same-day ticket sales suspended"},"vector":{"ja":"社内外を結ぶネットワーク機器への外部からの大量データ送信","en":"Large volume of external data sent to network equipment linking internal and external systems"},"actor":null,"summary":{"ja":"日本航空の社内外を結ぶネットワーク機器に外部から大量のデータが送り付けられ、システム障害が発生した。国内線・国際線71便が30分以上遅れ、4便が欠航し、当日便の航空券販売も一時停止した。","en":"A flood of external traffic hit the network equipment linking JAL's internal and external systems and caused a system outage. 71 flights were delayed by 30+ minutes, 4 were cancelled, and same-day ticket sales were paused."},"sources":[{"title":"JAL、サイバー攻撃で一時混乱、遅延71便・欠航4便、航空券販売見合わせも、システムは復旧","publisher":"トラベルボイス","date":"2024-12-26","url":"https://www.travelvoice.jp/20241226-156960"},{"title":"JAL、システム障害の遅延64便　13時20分復旧","publisher":"Aviation Wire","date":"2024-12-26","url":"https://www.aviationwire.jp/?p=315557"},{"title":"JAL への大量データ送付による障害、国内線 24 便が 30 分以上遅延","publisher":"ScanNetSecurity","date":"2025-01-07","url":"https://scan.netsecurity.ne.jp/article/2025/01/07/52125.html"},{"title":"重要インフラへの大規模 DDoS 考察 ほか [Scan PREMIUM Monthly Executive Summary 2024年12月度]","publisher":"ScanNetSecurity","date":"2025-01-16","url":"https://scan.netsecurity.ne.jp/article/2025/01/16/52169.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"日本航空","en":"Japan Airlines"},"group":"other"},{"id":"3ca6941dff","date":"2025-01-02","occurred":null,"disclosed":"2025-01-02","org":{"ja":"株式会社NTTドコモ","en":"NTT Docomo"},"sector":"it_cloud","type":"ddos","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"5時27分頃からgoo・OCNトップ等が利用しづらく、16時10分頃に復旧（報道）、17時半時点で概ね回復","en":"goo portal, OCN top page and webmail, d-menu news, Lemino and d払い shopping search, GOLF me degraded from ~05:27; access restored ~16:10 per CyberInsider (Docomo said largely recovering as of 17:30)"},"vector":{"ja":"DDoS攻撃によるネットワークの輻輳","en":"DDoS causing network congestion"},"actor":null,"summary":{"ja":"NTTドコモがDDoS攻撃を受けてネットワークが混雑し、gooやOCNのトップページ、dメニューニュースなどが約11時間使いにくくなった。","en":"A DDoS attack congested NTT Docomo's network and disrupted goo, the OCN top page, d-menu news and other services for about 11 hours."},"sources":[{"title":"【お詫び/第4報】gooサービス及びドコモの一部サービスがご利用しづらい事象について","publisher":"NTTドコモ","date":"2025-01-02","url":"https://www.docomo.ne.jp/info/notice/page/250102_03_m.html"},{"title":"Japan's Largest Telco NTT Docomo 12 Hours Down Due to DDoS Attack","publisher":"CyberInsider","date":"2025-01-02","url":"https://cyberinsider.com/japans-largest-telco-ntt-docomo-12-hours-down-due-to-ddos-attack/"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"NTTドコモ","en":"NTT Docomo"},"group":"other"},{"id":"c33a2df9b3","date":"2025-01-08","occurred":null,"disclosed":"2025-01-08","org":{"ja":"日本の政府機関・政治家・シンクタンク・報道機関・先端技術企業（MirrorFaceキャンペーン）","en":"Japanese government bodies, politicians, think tanks, media and advanced-technology firms (MirrorFace campaign)"},"sector":"government","type":"apt_espionage","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"マルウェア付き標的型メール（2024年6月頃からはDLリンク型）と、2023年以降のVPN等ネットワーク機器の脆弱性悪用","en":"Spear-phishing emails with malware (2019–2023, and download links from around June 2024); from 2023, exploitation of internet-facing network-device (VPN) vulnerabilities"},"actor":"MirrorFace (aka Earth Kasha); NPA and NISC assess suspected Chinese involvement; the Yomiuri reports links to APT10","summary":{"ja":"警察庁と内閣サイバーセキュリティセンターは、2019年頃から続く安全保障・先端技術情報を狙った攻撃を「MirrorFace」によるものと評価し、中国の関与が疑われると公表した。標的には省庁や政治家、シンクタンク、JAXAなどが含まれると報じられた。","en":"Japan's NPA and NISC attributed a campaign running since about 2019, aimed at national-security and advanced-technology information, to the group MirrorFace and said Chinese involvement is suspected. Reported targets include ministries, politicians, think tanks and JAXA."},"sources":[{"title":"MirrorFaceによるサイバー攻撃について（注意喚起）","publisher":"警察庁・内閣サイバーセキュリティセンター","date":"2025-01-08","url":"https://www.npa.go.jp/bureau/cyber/koho/caution/caution20250108.html"},{"title":"警察庁、中国の関与が疑われる組織的サイバー攻撃キャンペーンに注意を呼びかけ","publisher":"ScanNetSecurity","date":"2025-01-21","url":"https://scan.netsecurity.ne.jp/article/2025/01/21/52188.html"},{"title":"Chinese hacking group has launched over 200 cyberattacks on Japanese gov't, firms since 2019","publisher":"The Japan News (Yomiuri) via Asia News Network","date":"2025-01-10","url":"https://asianews.network/chinese-hacking-group-has-launched-over-200-cyberattacks-on-japanese-govt-firms-since-2019/"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"日本の政府機関・政治家・シンクタンク・報道機関・先端技術企業","en":"Japanese government bodies, politicians, think tanks, media and advanced-technology firms"},"group":"other"},{"id":"f74866e223","date":"2025-01-21","occurred":"2025-01-18","disclosed":"2025-01-21","org":{"ja":"株式会社快活フロンティア（快活CLUB）","en":"Kaikatsu Frontier (Kaikatsu Club)"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":7290087,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"会員アカウント管理サーバへの不正アクセス（手口は非公表）","en":"Unauthorised access to the member-account server (method not stated)"},"actor":null,"summary":{"ja":"ネットカフェ「快活CLUB」の会員管理システムに不正アクセスがあり、最大729万件の会員情報が漏えいした可能性がある。","en":"Attackers accessed the member-management system of internet-café chain Kaikatsu Club, and up to 7.29 million member records may have leaked."},"sources":[{"title":"「快活 CLUB」に不正アクセス、729 万 87 件の会員情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2025-01-29","url":"https://scan.netsecurity.ne.jp/article/2025/01/29/52233.html"},{"title":"「快活 CLUB」への不正アクセス 容疑者逮捕","publisher":"ScanNetSecurity","date":"2025-12-17","url":"https://scan.netsecurity.ne.jp/article/2025/12/17/54255.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"快活フロンティア","en":"Kaikatsu Frontier"},"group":"access"},{"id":"9807fae7a0","date":"2025-02-07","occurred":"2025-01-21","disclosed":"2025-02-07","org":{"ja":"株式会社サンリオエンターテイメント","en":"Sanrio Entertainment Co., Ltd."},"sector":"media_entertainment","type":"ransomware","via_vendor":false,"records":2000000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"一部サービスが利用不可、対象サーバを隔離","en":"Some services unavailable; affected servers isolated"},"vector":null,"actor":null,"summary":{"ja":"サンリオエンターテイメントのサーバが不正アクセスを受けてランサムウェア被害が発生し、最大約200万件の個人情報などが漏えいした可能性がある。","en":"A ransomware attack on Sanrio Entertainment's servers may have exposed up to about 2 million personal and other confidential records."},"sources":[{"title":"サンリオエンターテイメントにランサムウェア攻撃、最大約 200 万件の個人情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2025-02-10","url":"https://scan.netsecurity.ne.jp/article/2025/02/10/52303.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"サンリオエンターテイメント","en":"Sanrio Entertainment"},"group":"ransomware"},{"id":"59b0ec02f3","date":"2025-03-05","occurred":"2025-02-05","disclosed":"2025-03-05","org":{"ja":"NTTコミュニケーションズ株式会社","en":"NTT Communications"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":17891,"cost_jpy":null,"outage":null,"vector":{"ja":"社内のオーダ情報流通システム内の設備Aへの不正アクセス（手口は非公表）","en":"Unauthorised access to 'device A' in the internal order-information distribution system (method not stated)"},"actor":null,"summary":{"ja":"NTTコミュニケーションズの社内システムに不正アクセスがあり、法人顧客17,891社の情報の一部が流出した可能性がある。","en":"Attackers got into an internal NTT Communications system, and some information on 17,891 corporate customers may have leaked."},"sources":[{"title":"NTTコミュニケーションズに不正アクセス、17,891 社の顧客情報が流出した可能性","publisher":"ScanNetSecurity","date":"2025-03-11","url":"https://scan.netsecurity.ne.jp/article/2025/03/11/52470.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"NTTコミュニケーションズ","en":"NTT Communications"},"group":"access"},{"id":"c39a891903","date":"2025-04-03","occurred":"2025-01-01","disclosed":"2025-04-03","org":{"ja":"国内証券会社各社（楽天証券・SBI証券・野村證券ほか）","en":"Japanese brokerages (Rakuten, SBI, Nomura and others)"},"sector":"finance","type":"account_takeover","via_vendor":false,"records":17717,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"証券会社を装うフィッシングサイトで窃取されたログインIDとパスワード","en":"Login IDs and passwords stolen through phishing sites impersonating brokers"},"actor":"Unknown; Nikkei reported suspected organised market manipulation","summary":{"ja":"証券会社を装うフィッシングで盗まれたIDとパスワードで個人の証券口座が乗っ取られ、勝手に株が売買された。金融庁集計では、2025年の不正アクセスは17,717件、不正取引は9,861件、不正な売却は約3,949億円、買付は約3,468億円にのぼった。","en":"Brokerage accounts were hijacked with credentials stolen through fake broker sites, and shares were traded without the owners' consent. FSA data for 2025 shows 17,717 unauthorised logins, 9,861 unauthorised trades, about ¥395bn of unauthorised sales and about ¥347bn of purchases."},"sources":[{"title":"インターネット取引サービスへの不正アクセス・不正取引による被害が急増しています","publisher":"金融庁","date":"2026-10-09","url":"https://www.fsa.go.jp/ordinary/chuui/chuui_phishing.html"},{"title":"インターネット取引サービスへの不正アクセス・不正取引の発生状況（PDF）","publisher":"金融庁","date":"2026-10-09","url":"https://www.fsa.go.jp/ordinary/chuui/chuui_phishing/20261009.pdf"},{"title":"証券口座乗っ取り、楽天・野村など5社被害　相場操縦か","publisher":"日本経済新聞","date":"2025-04-05","url":"https://www.nikkei.com/article/DGXZQOUE313GJ0R30C25A3000000/"},{"title":"証券口座の乗っ取り、楽天証券やマネックスなど10社が一定の被害補償の方針示す","publisher":"ケータイ Watch","date":"2025-05-02","url":"https://k-tai.watch.impress.co.jp/docs/news/2011733.html"},{"title":"証券口座乗っ取り補償で損失計上　SBI証券は80億円、楽天証券は10億円","publisher":"日本経済新聞","date":"2025-07-29","url":"https://www.nikkei.com/article/DGXZQOUB293PN0Z20C25A7000000/"}],"confidence":"high","wave":false,"landmark":true,"counts_toward_total":false,"records_note":{"ja":"攻撃による漏えいの件数ではない（設定ミス・人為的ミス・件数の集計値）ため合計に含めない","en":"not added to totals: not records leaked by an attack (misconfiguration, human error, or a count of cases)"},"short":{"ja":"国内証券会社各社","en":"Japanese brokerages"},"group":"other"},{"id":"c8c6f06fc7","date":"2025-04-15","occurred":"2024-08-03","disclosed":"2025-04-15","org":{"ja":"株式会社インターネットイニシアティブ（IIJセキュアMXサービス）","en":"Internet Initiative Japan (IIJ Secure MX Service)"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":4072650,"affected_orgs":586,"cost_jpy":null,"outage":null,"vector":{"ja":"オプション機能で使っていた他社製Webメール「Active! mail」のゼロデイ脆弱性（JVN#22348866）","en":"Zero-day in the third-party webmail software Active! mail (stack buffer overflow, JVN#22348866), used in an optional feature"},"actor":null,"summary":{"ja":"IIJの法人向けメールセキュリティサービスが、組み込まれていた他社製Webメールソフトの未知の脆弱性を突かれ、約8カ月にわたり不正アクセスを受けた。実際の漏えいは586契約で確認された。","en":"An unknown flaw in third-party webmail software built into IIJ's business mail-security service let attackers in for about eight months. Leaks were confirmed for 586 customer contracts."},"sources":[{"title":"IIJセキュアMXサービスにおけるお客様情報の漏えいについて","publisher":"IIJ","date":"2025-04-15","url":"https://www.iij.ad.jp/news/pressrelease/2025/0415.html"},{"title":"IIJセキュアMXサービスにおけるお客様情報の漏えいについてのお詫びとご報告","publisher":"IIJ","date":"2025-04-22","url":"https://www.iij.ad.jp/news/pressrelease/2025/0422-2.html"},{"title":"「IIJセキュアMXサービス」に不正アクセス、4,072,650 件のメール情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2025-04-16","url":"https://scan.netsecurity.ne.jp/article/2025/04/16/52691.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"インターネットイニシアティブ","en":"Internet Initiative Japan"},"group":"access"},{"id":"f4833e09d4","date":"2025-04-25","occurred":"2025-04-17","disclosed":"2025-04-25","org":{"ja":"損害保険ジャパン株式会社","en":"Sompo Japan Insurance Inc."},"sector":"finance","type":"unauthorized_access","via_vendor":false,"records":17480000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"対象のWebシステムを停止","en":"Affected web system shut down"},"vector":{"ja":"社内Webシステム（各種指標管理のサブシステム）への第三者の侵入（手口は非公表）","en":"Third-party intrusion into an internal web system (a KPI-management subsystem); method not stated"},"actor":null,"summary":{"ja":"損保ジャパンの社内Webシステムに不正アクセスがあり、顧客や代理店に関する最大約1,748万件のデータが閲覧・漏えいした可能性がある。金融庁は報告徴求命令を出した。","en":"Intruders got into an internal Sompo Japan web system, putting up to about 17.48 million customer and agency data items at risk. The FSA ordered the insurer to report."},"sources":[{"title":"当社システムに対する不正アクセスの発生及び情報漏えいの可能性について（第２報）","publisher":"損害保険ジャパン","date":"2025-06-11","url":"https://www.sompo-japan.co.jp/-/media/SJNK/files/news/2025/20250611_1.pdf"},{"title":"金融庁から保険業法に基づき「報告徴求命令」～ 損害保険ジャパンへの不正アクセス","publisher":"ScanNetSecurity","date":"2025-06-18","url":"https://scan.netsecurity.ne.jp/article/2025/06/18/53066.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"損害保険ジャパン","en":"Sompo Japan Insurance"},"group":"access"},{"id":"49b8dec31d","date":"2025-09-29","occurred":null,"disclosed":"2025-09-29","org":{"ja":"アサヒグループホールディングス株式会社","en":"Asahi Group Holdings, Ltd."},"sector":"retail_food","type":"ransomware","via_vendor":false,"records":2300000,"affected_orgs":null,"cost_jpy":17000000000,"outage":{"ja":"9/29に国内受注・出荷と多くの工場が停止、10/1から手作業出荷、12月にシステム受注再開、全品出荷は2026/4/7","en":"Domestic order and shipping systems halted from 2025-09-29 and most factories stopped; manual (paper/fax/Excel) shipping from 10-01; all plants producing again from 10-09, but only ~10% of beer items shipping at end-October; system orders resumed Dec 2025; full-item shipping reported restored 2026-04-07"},"vector":{"ja":"グループ拠点のネットワーク機器から主要DCへ侵入、脆弱なパスワードで管理者権限を得て認証サーバから一斉展開","en":"Entry through network equipment at a group site into the main data centre; admin rights gained via a weak password; ransomware launched simultaneously from an authentication server; intrusion ~10 days before encryption"},"actor":"Qilin (claim surfaced 2025-10-08; Asahi has not named the attacker)","summary":{"ja":"アサヒグループHDがランサムウェア攻撃を受け、国内の受注・出荷システムが止まり、多くの工場で生産も一時停止した。紙やFAXでの手作業出荷が続き、2025年12月期決算の発表は約5カ月遅れ、純利益は36.7%減った。","en":"Ransomware at Asahi Group halted its domestic ordering and shipping systems and briefly stopped production at most factories, forcing manual paper-and-fax shipping for months. Its FY2025 results came about five months late, with net profit down 36.7%."},"sources":[{"title":"アサヒグループHDが攻撃被害の概要を説明、現時点で犯人側からの身代金要求はなし","publisher":"クラウド Watch","date":"2025-11-28","url":"https://cloud.watch.impress.co.jp/docs/news/2066886.html"},{"title":"アサヒ障害1カ月復旧めど立たず　ビール出荷品目1割に低迷","publisher":"秋田魁新報","date":"2025-10-29","url":"https://www.sakigake.jp/news/article/20251029CO0099/"},{"title":"アサヒグループHDで11万件漏えい発覚","publisher":"ITmedia NEWS","date":"2026-02-18","url":"https://www.itmedia.co.jp/news/article/2602/18/1260218117/"},{"title":"アサヒグループホールディングスへのランサムウェア攻撃、個人情報 115,513 件の漏えいを確認","publisher":"ScanNetSecurity","date":"2026-02-27","url":"https://scan.netsecurity.ne.jp/article/2026/02/27/54722.html"},{"title":"アサヒグループホールディングスへのサイバー攻撃、システム障害などの影響で売上収益が想定を 600 億円下回る見込み","publisher":"ScanNetSecurity","date":"2026-06-16","url":"https://scan.netsecurity.ne.jp/article/2026/06/16/55503.html"},{"title":"アサヒ、純利益を下方修正","publisher":"共同通信（OANDA掲載）","date":"2026-06-11","url":"https://www.oanda.jp/lab-education/market_news/kn_2026061101001853/"},{"title":"アサヒ、純利益36・7%減　サイバー攻撃、発表も遅れ","publisher":"共同通信（熊本日日新聞）","date":"2026-07-08","url":"https://kumanichi.com/articles/2011313"},{"title":"アサヒ グループホールディングス、2025年12月期決算を発表-純利益37%減、サイバー攻撃の影響は370億円弱","publisher":"rocket-boys.co.jp","date":"2026-07-10","url":"https://rocket-boys.co.jp/?p=36530"},{"title":"アサヒ、37万8千件漏えいか　サイバー攻撃で追加発表","publisher":"共同通信（熊本日日新聞）","date":"2026-07-17","url":"https://kumanichi.com/articles/2014828"},{"title":"警察庁、ランサムウェア攻撃グループ「Qilin」の被疑者逮捕について説明","publisher":"INTERNET Watch","date":"2026-10-08","url":"https://internet.watch.impress.co.jp/docs/news/2146896.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"アサヒグループホールディングス","en":"Asahi Group Holdings"},"group":"ransomware"},{"id":"ae07f7139a","date":"2025-10-19","occurred":null,"disclosed":"2025-10-19","org":{"ja":"アスクル株式会社","en":"ASKUL Corporation"},"sector":"retail_food","type":"ransomware","via_vendor":false,"records":740000,"affected_orgs":null,"cost_jpy":5100000000,"outage":{"ja":"10/19からASKUL・LOHACOの受注出荷が停止、全商品再開は2026/1/22。無印良品・ロフトの通販も停止","en":"ASKUL/LOHACO orders and shipping halted from 2025-10-19; logistics-based shipping resumed in stages from Dec 2025; all products purchasable again 2026-01-22 (~3 months). Muji Net Store (logistics by ASKUL LOGIST) halted ~2 months, fully reopened 2025-12-15; Loft Net Store also halted"},"vector":{"ja":"多要素認証のない委託先の管理者アカウントでVPN侵入、EDRを無効化し横展開。問い合わせ管理クラウドのアカウントも窃取","en":"ID/password of an administrator account issued to a contractor, without MFA, used to enter via VPN; EDR disabled, then lateral movement; an external cloud inquiry-management account was also stolen"},"actor":"RansomHouse (claimed 2025-10-30; said it stole ~1.1TB)","summary":{"ja":"通販大手アスクルがランサムウェア攻撃を受け、ASKUL・LOHACOの受注・出荷が止まった。物流を委託していた無印良品やロフトのネットストアも停止し、全商品の販売再開まで約3カ月かかった。","en":"Ransomware at e-commerce firm ASKUL halted orders and shipping for ASKUL and LOHACO. The online stores of MUJI and Loft, which used ASKUL's logistics, also went down, and full sales took about three months to return."},"sources":[{"title":"アスクル、ランサムウェアの情報流出は約74万件　「攻撃者とは接触せず」","publisher":"Impress Watch","date":"2025-12-12","url":"https://www.watch.impress.co.jp/docs/news/2070955.html"},{"title":"アスクル「犯行声明は把握している」　ランサム被害で","publisher":"ITmedia NEWS","date":"2025-10-31","url":"https://www.itmedia.co.jp/news/articles/2510/31/news124.html"},{"title":"無印良品ネットストアが停止、アスクルのシステム障害の影響で","publisher":"INTERNET Watch","date":"2025-10-20","url":"https://internet.watch.impress.co.jp/docs/news/2056460.html"},{"title":"「無印良品ネットストア」、15日から完全再開　アスクルのランサム被害から2カ月","publisher":"ITmedia NEWS","date":"2025-12-12","url":"https://www.itmedia.co.jp/news/articles/2512/12/news110.html"},{"title":"アスクルが説明したランサムウェア攻撃で感染した理由＋サイバー保険による損害補償＋セキュリティ投資方針","publisher":"ネットショップ担当者フォーラム","date":"2026-01-30","url":"https://netshop.impress.co.jp/n/2026/01/30/15513"},{"title":"アスクル赤字221億円　26年5月期、サイバー攻撃","publisher":"共同通信（熊本日日新聞）","date":"2026-07-03","url":"https://kumanichi.com/articles/2009843"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"アスクル","en":"ASKUL"},"group":"ransomware"},{"id":"acd071e7d0","date":"2025-11-04","occurred":null,"disclosed":"2025-11-04","org":{"ja":"株式会社日本経済新聞社","en":"Nikkei Inc."},"sector":"media_entertainment","type":"account_takeover","via_vendor":false,"records":17368,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"社員の私物PCのウイルス感染でSlack認証情報が漏れ、その社員のアカウントに不正ログイン","en":"Malware on an employee's personal PC leaked Slack credentials, which were used to log in to that employee's Slack account"},"actor":null,"summary":{"ja":"日本経済新聞社の社員の私物PCがウイルスに感染してSlackの認証情報が漏れ、不正ログインにより社員や取引先など最大17,368人分の情報が流出した可能性がある。取材情報の漏えいは確認されていない。","en":"Malware on a Nikkei employee's personal PC leaked their Slack login, and the resulting break-in may have exposed information on up to 17,368 employees and partners. No leak of reporting or source information was found."},"sources":[{"title":"取材に関する情報漏えいは確認されず ～ 日本経済新聞社が利用する「Slack」に不正ログイン、社員や取引先など 1 万 7,368 人分の情報が流出した可能性","publisher":"ScanNetSecurity","date":"2025-11-07","url":"https://scan.netsecurity.ne.jp/article/2025/11/07/53972.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"日本経済新聞社","en":"Nikkei"},"group":"other"},{"id":"2da9ddba27","date":"2025-11-14","occurred":null,"disclosed":"2025-11-14","org":{"ja":"学校法人東海大学（委託先：株式会社東海ソフト開発）","en":"Tokai University (contractor Tokai Soft Development)"},"sector":"education","type":"supply_chain","via_vendor":true,"records":193118,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"攻撃者が委託先ネットワークの認証情報を入手し、同社サーバでランサムウェアを実行","en":"Attacker obtained credentials to the contractor's network and deployed ransomware on its server"},"actor":null,"summary":{"ja":"東海大学のネットワーク保守委託先がランサムウェア攻撃を受けた。委託先が規則に反して学内データを社内に持ち出していたため、学生・保護者・教職員など延べ最大193,118人の個人情報が漏えいした。","en":"Ransomware hit Tokai University's network-maintenance contractor, which had taken university data off-site against the rules. Personal data of up to 193,118 students, parents, staff and others leaked (cumulative count)."},"sources":[{"title":"【第２報】業務委託先サーバへの不正アクセスに関する調査状況と対応について","publisher":"東海大学","date":"2026-02-18","url":"https://www.u-tokai.ac.jp/uploads/2026/02/8f619ff70dd54597ac4189dff04c9dea.pdf"},{"title":"東海大学委託先 東海ソフト開発へのランサムウェア攻撃、漏えいの対象者数は最大で延べ 193,118 人に","publisher":"ScanNetSecurity","date":"2026-03-06","url":"https://scan.netsecurity.ne.jp/article/2026/03/06/54778.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"東海大学","en":"Tokai University"},"group":"access"},{"id":"e64db4e67b","date":"2025-12-03","occurred":"2025-11-29","disclosed":"2025-12-03","org":{"ja":"信和株式会社（子会社）","en":"Shinwa Co., Ltd. (subsidiary)"},"sector":"manufacturing","type":"other","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":250000000,"outage":null,"vector":{"ja":"サポート詐欺：偽のウイルス警告から偽窓口に電話した社員が遠隔操作ソフトを導入し、ネットバンキングで不正送金","en":"Support scam: a fake virus warning led an employee to call a bogus support line and install remote-access tools, and the attacker then made online-banking transfers"},"actor":null,"summary":{"ja":"信和の子会社で偽のウイルス警告に従った従業員が遠隔操作ソフトを導入し、ネットバンキングから不正送金され、2億5,000万円の損失を計上した。","en":"At a Shinwa subsidiary, a fake virus warning led an employee to install remote-control software. The attacker made fraudulent online-banking transfers, and Shinwa booked a ¥250 million loss."},"sources":[{"title":"当社子会社における資金流出事案に関する調査結果及び再発防止策のお知らせ","publisher":"信和","date":"2026-02-09","url":"https://data.swcms.net/file/shinwa-jp/ja/topics/auto_20260209551512/pdfFile.pdf"},{"title":"BECではなくサポート詐欺で2億5,000万円資金流出","publisher":"ScanNetSecurity","date":"2026-02-24","url":"https://scan.netsecurity.ne.jp/article/2026/02/24/54688.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"信和","en":"Shinwa"},"group":"other"},{"id":"5818e146af","date":"2026-01-05","occurred":"2025-12-18","disclosed":"2026-01-05","org":{"ja":"株式会社シーエーシー（寄附金Web申請クラウド「Academic Support Navi」）","en":"CAC Corporation (Academic Support Navi donation cloud service)"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"2025年12月25日夜からサービスを停止しネットワークから隔離","en":"Service suspended and isolated from the evening of 2025-12-25"},"vector":{"ja":"サービスのWebサーバに不正プログラムが設置・実行された（手口は非公表）","en":"Unauthorised programs installed and run on the service's web server (method not disclosed)"},"actor":null,"summary":{"ja":"大学などが使う寄附金Web申請クラウド「Academic Support Navi」のサーバに不正プログラムが設置され、サービスが停止した。暗号資産マイニング目的とみられるが、個人データ漏えいのおそれがある事態として扱われた。","en":"Malicious programs were planted on CAC's Academic Support Navi donation-application cloud, which universities and other clients use, and the service was shut down. Crypto-mining appears to have been the aim, but CAC treated it as a possible personal-data leak."},"sources":[{"title":"「Academic Support Navi」への不正アクセスに関する調査結果のご報告（第3報）","publisher":"シーエーシー","date":"2026-02-12","url":"https://www.cac.co.jp/news/topics_260212/"},{"title":"目的は暗号資産のマイニング等 ～ 寄附金Web申請クラウドサービス「Academic Support Navi」への不正アクセス","publisher":"ScanNetSecurity","date":"2026-03-10","url":"https://scan.netsecurity.ne.jp/article/2026/03/10/54799.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"シーエーシー","en":"CAC"},"group":"access"},{"id":"a2c11e5428","date":"2026-01-07","occurred":null,"disclosed":"2026-01-07","org":{"ja":"興和江守株式会社","en":"Kowa Emori Co., Ltd."},"sector":"other","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"取引先への受注・出荷業務が遅延","en":"Order intake and shipping to customers delayed"},"vector":null,"actor":null,"summary":{"ja":"化学品商社の興和江守でランサムウェア感染によるシステム障害が起き、取引先との受注・出荷業務に遅れが出た。","en":"Ransomware caused a system outage at chemicals trader Kowa Emori, delaying orders and shipments to customers."},"sources":[{"title":"興和江守でランサムウェア感染、取引先への受注出荷業務に遅滞","publisher":"ScanNetSecurity","date":"2026-01-23","url":"https://scan.netsecurity.ne.jp/article/2026/01/23/54466.html"},{"title":"興和江守でランサムウェア感染、新たなネットワーク環境と新 PC を導入","publisher":"ScanNetSecurity","date":"2026-02-06","url":"https://scan.netsecurity.ne.jp/article/2026/02/06/54579.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"興和江守","en":"Kowa Emori"},"group":"ransomware"},{"id":"b7149216ab","date":"2026-01-08","occurred":"2025-12-22","disclosed":"2026-01-08","org":{"ja":"公立大学法人沖縄県立看護大学","en":"Okinawa Prefectural College of Nursing"},"sector":"education","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"2025年12月22日から教務支援システムが利用不可","en":"Academic affairs support system unavailable from 2025-12-22"},"vector":null,"actor":null,"summary":{"ja":"沖縄県立看護大学の教務支援システムのサーバがランサムウェアで暗号化され、システムが使えなくなった。","en":"Ransomware encrypted servers of the Okinawa Prefectural College of Nursing's academic affairs system, taking it offline."},"sources":[{"title":"教務支援システムに対する不正アクセスについて（第１報）","publisher":"沖縄県立看護大学","date":"2026-01-08","url":"https://www.okinawa-nurs.ac.jp/news/20514-2/"},{"title":"沖縄県立看護大学にランサムウェア攻撃、教務支援システムが利用できない状態に","publisher":"ScanNetSecurity","date":"2026-01-23","url":"https://scan.netsecurity.ne.jp/article/2026/01/23/54468.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"沖縄県立看護大学","en":"Okinawa Prefectural College of Nursing"},"group":"ransomware"},{"id":"8783ec316b","date":"2026-01-08","occurred":null,"disclosed":"2026-01-08","org":{"ja":"株式会社スマレジ（連携アプリ提供元：合同会社coastline）","en":"Smaregi Inc. (third-party app vendor coastline LLC)"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":110359,"affected_orgs":8,"cost_jpy":null,"outage":{"ja":"該当アプリをアプリマーケットから削除し接続を遮断","en":"Affected app removed from the App Market and its access blocked"},"vector":{"ja":"外部アプリのデータベースの外部アクセス設定不備とアクセス制御の不足","en":"Misconfigured external access and weak access control on the third-party app's database"},"actor":null,"summary":{"ja":"スマレジのアプリマーケットで提供されていた外部アプリの開発元が管理するデータベースに不正アクセスがあり、導入店舗の顧客の氏名110,359件・電話番号100,293件が流出した。スマレジ本体からの流出はない。","en":"A database run by the developer of an add-on app in Smaregi's App Market was breached, leaking 110,359 names and 100,293 phone numbers of customers at stores using the app. Smaregi's own systems were not breached."},"sources":[{"title":"【重要】外部アプリにおける個人情報流出について（続報）","publisher":"スマレジ","date":"2026-01-13","url":"https://corp.smaregi.jp/news/press/20260113.php"},{"title":"スマレジ連携アプリへの不正アクセス、連携店舗の顧客情報 外部流出","publisher":"ScanNetSecurity","date":"2026-03-18","url":"https://scan.netsecurity.ne.jp/article/2026/03/18/54859.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"スマレジ","en":"Smaregi"},"group":"access"},{"id":"3ce07f8971","date":"2026-01-14","occurred":"2025-10-21","disclosed":"2026-01-14","org":{"ja":"ENEOSグローブエナジー（LPガス配送委託先：エネサンス北海道・エネサンス関東）","en":"ENEOS Globe Energy (LPG delivery contractors Enesance Hokkaido and Enesance Kanto)"},"sector":"infrastructure_energy","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"委託先が、2025年10月21日にランサムウェア被害を受けた親会社エネサンスHDのネットワークを利用","en":"Contractors used the network of their parent, Enesance Holdings, which was hit by ransomware on 2025-10-21"},"actor":null,"summary":{"ja":"ENEOSグローブエナジーは、LPガス配送委託先がランサムウェア被害を受けた親会社エネサンスHDのネットワークを使っていたため、北海道と神奈川県の一部顧客情報が漏えいした可能性があると公表した。","en":"ENEOS Globe Energy said some customer data in Hokkaido and Kanagawa may have leaked, because its LPG delivery contractors used the network of their ransomware-hit parent, Enesance Holdings."},"sources":[{"title":"エネサンスホールディングスへのランサムウェア攻撃、北海道と神奈川県の LPガス配送にかかわる情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-01-30","url":"https://scan.netsecurity.ne.jp/article/2026/01/30/54521.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"ENEOSグローブエナジー","en":"ENEOS Globe Energy"},"group":"access"},{"id":"ed42c9a2ed","date":"2026-01-19","occurred":"2025-10-17","disclosed":"2026-01-19","org":{"ja":"九州旅客鉄道（JR九州）グループ会社","en":"JR Kyushu group companies"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":14638,"affected_orgs":58,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"JR九州グループ会社のネットワークが不正アクセスを受け、グループ58社の従業員・元従業員14,638名の氏名・メールアドレス・PCログインIDが漏えいした可能性がある。","en":"Intruders hit a JR Kyushu group company network, possibly exposing names, email addresses and PC login IDs of 14,638 current and former staff at 58 group companies."},"sources":[{"title":"JR 九州のグループ会社に勤務した経験のある方々へのお知らせ","publisher":"九州旅客鉄道","date":"2026-01-19","url":"https://www.jrkyushu.co.jp/common/inc/news/newtopics/__icsFiles/afieldfile/2026/01/19/20260119_noticeforthosewithexperienceworkingatjrkyushugroupcompanies.pdf"},{"title":"JR九州グループにサイバー攻撃、セキュリティーツールで検知防御したが従業員情報が漏えいした可能性があると判断","publisher":"ScanNetSecurity","date":"2026-02-04","url":"https://scan.netsecurity.ne.jp/article/2026/02/04/54553.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"九州旅客鉄道（JR九州）グループ会社","en":"JR Kyushu group companies"},"group":"access"},{"id":"f692051e9d","date":"2026-01-20","occurred":"2026-01-15","disclosed":"2026-01-20","org":{"ja":"株式会社トンボ飲料","en":"Tombow Beverage Co., Ltd."},"sector":"retail_food","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"リモートデスクトップソフト（最終報による）","en":"Remote desktop software (per the final report)"},"actor":null,"summary":{"ja":"トンボ飲料の一部サーバがランサムウェア攻撃を受け、取引先情報の一部が流出した可能性がある。侵入手口はリモートデスクトップソフトだった。","en":"Ransomware hit some Tombow Beverage servers and part of its business-partner data may have leaked. The entry point was remote desktop software."},"sources":[{"title":"トンボ飲料にランサムウェア攻撃、取引先に関する一部情報の流出を確認","publisher":"ScanNetSecurity","date":"2026-02-06","url":"https://scan.netsecurity.ne.jp/article/2026/02/06/54578.html"},{"title":"侵入手口はリモートデスクトップソフト ～ トンボ飲料にランサムウェア攻撃","publisher":"ScanNetSecurity","date":"2026-03-17","url":"https://scan.netsecurity.ne.jp/article/2026/03/17/54851.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"トンボ飲料","en":"Tombow Beverage"},"group":"ransomware"},{"id":"8186c06237","date":"2026-01-23","occurred":null,"disclosed":"2026-01-23","org":{"ja":"萩原電気ホールディングス（香港子会社）","en":"Hagiwara Electric Holdings (Hong Kong subsidiary)"},"sector":"other","type":"other","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":279000000,"outage":null,"vector":{"ja":"悪意ある第三者からの虚偽の送金指示","en":"False remittance instructions from a malicious third party"},"actor":null,"summary":{"ja":"萩原電気HDの香港子会社が虚偽の送金指示に従い、約187万6,000米ドル（約2億7,900万円）が流出した。","en":"Hagiwara Electric's Hong Kong unit followed fraudulent payment instructions and lost about US$1.876M (≈¥279M)."},"sources":[{"title":"資金流出 187 万 6,000 USドル（約 2 億 7,900万円）萩原電気グループ会社へ虚偽の送金指示","publisher":"ScanNetSecurity","date":"2026-01-29","url":"https://scan.netsecurity.ne.jp/article/2026/01/29/54509.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"萩原電気ホールディングス","en":"Hagiwara Electric Holdings"},"group":"other"},{"id":"236c43d05e","date":"2026-02-03","occurred":"2026-02-02","disclosed":"2026-02-03","org":{"ja":"ホソカワミクロン株式会社","en":"Hosokawa Micron Corporation"},"sector":"manufacturing","type":"account_takeover","via_vendor":false,"records":1728,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"漏えいまたは推測された認証情報で補助的なクラウドストレージに不正ログイン","en":"Login to a supplementary cloud-storage account with leaked or guessed credentials"},"actor":null,"summary":{"ja":"ホソカワミクロンが補助的に使っていたクラウドストレージに不正ログインされ、従業員や取引先関係者など1,728人分の個人情報を含むファイルが流出し、ネット上に公開された。","en":"Attackers logged into a cloud-storage account Hosokawa Micron used, and files holding data on 1,728 employees and business contacts were stolen and posted online."},"sources":[{"title":"【重要なお知らせ】当社がサイバー攻撃を受けた可能性のある事象について（最終報）","publisher":"ホソカワミクロン","date":"2026-03-27","url":"https://www.hosokawamicron.co.jp/jp/news/2026/0327.html"},{"title":"ホソカワミクロンにサイバー攻撃、インターネット上で流出した疑いのあるファイルが公開","publisher":"ScanNetSecurity","date":"2026-03-05","url":"https://scan.netsecurity.ne.jp/article/2026/03/05/54763.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ホソカワミクロン","en":"Hosokawa Micron"},"group":"other"},{"id":"494b3f9b90","date":"2026-02-03","occurred":null,"disclosed":"2026-02-03","org":{"ja":"株式会社穴吹ハウジングサービス","en":"Anabuki Housing Service Co., Ltd."},"sector":"services","type":"ransomware","via_vendor":false,"records":207773,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"重要事項調査報告書受付システム「J-Web/R」が2026年5月まで停止、管理業務の一部も制限","en":"J-Web/R report-request web system suspended until May 2026; parts of condo-association and rental management restricted"},"vector":{"ja":"グループ会社のネットワーク機器の脆弱性を突かれ、その後横展開","en":"Vulnerability in network equipment at a group company, followed by lateral movement"},"actor":null,"summary":{"ja":"穴吹ハウジングサービスがグループ会社のネットワーク機器の脆弱性を突かれてランサムウェア攻撃を受け、207,773人分の個人情報が漏えいした可能性がある（当初は約49万6,000人と推計）。","en":"Anabuki Housing Service was hit by ransomware through a vulnerable network device at a group company. Its final count was 207,773 people possibly affected, down from an initial estimate of about 496,000."},"sources":[{"title":"情報漏えいに関する調査結果および今後の取り組みについて（第6報）","publisher":"穴吹ハウジングサービス","date":"2026-05-21","url":"https://www.anabuki-housing.co.jp/news/content.php?news_id=530&news_category_cd=6"},{"title":"穴吹ハウジングサービスへのランサムウェア攻撃、重要事項調査報告書ウェブ受付システム「J-Web/R」が利用できない状態に","publisher":"ScanNetSecurity","date":"2026-02-27","url":"https://scan.netsecurity.ne.jp/article/2026/02/27/54720.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"穴吹ハウジングサービス","en":"Anabuki Housing Service"},"group":"ransomware"},{"id":"39841bb7e4","date":"2026-02-06","occurred":"2026-02-04","disclosed":"2026-02-06","org":{"ja":"ジェックス株式会社","en":"GEX Corporation"},"sector":"manufacturing","type":"ransomware","via_vendor":false,"records":78979,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"商品出荷を停止、サーバを順次復旧して再開","en":"Product shipments halted, resumed after phased server recovery"},"vector":null,"actor":null,"summary":{"ja":"ペット用品メーカーのジェックスでサーバがランサムウェアで暗号化され、商品出荷が一時止まった。顧客情報約7.9万件が侵入者から閲覧可能な状態だった。","en":"Ransomware encrypted servers at pet-products maker GEX and briefly halted shipments. About 79,000 customer records were viewable by the intruder."},"sources":[{"title":"ジェックスにランサムウェア攻撃、商品の出荷を停止","publisher":"ScanNetSecurity","date":"2026-02-25","url":"https://scan.netsecurity.ne.jp/article/2026/02/25/54700.html"},{"title":"【重要】ランサムウェア攻撃による個人情報漏えいの調査結果および再発防止策について","publisher":"ジェックス","date":"2026-08-19","url":"https://www.gex-fp.co.jp/news/20260819/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ジェックス","en":"GEX"},"group":"ransomware"},{"id":"aa19142062","date":"2026-02-12","occurred":"2025-12-05","disclosed":"2026-02-12","org":{"ja":"株式会社マイナビ","en":"Mynavi Corporation"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":111505,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"マイナビが利用する外部クラウドサービスへの不正アクセス（サービス名は非公表）","en":"Unauthorised access to a third-party cloud service used by Mynavi (service not named)"},"actor":null,"summary":{"ja":"マイナビが利用するクラウドサービスに不正アクセスがあり、サービス利用者・取引先担当者・グループ従業員の計約11万件の個人情報が流出した可能性がある。","en":"Attackers accessed a cloud service Mynavi uses, possibly exposing about 111,500 records of service users, client contacts and group employees."},"sources":[{"title":"当社が利用するクラウドサービスに対する不正アクセスの発生および個人情報流出の可能性について","publisher":"マイナビ","date":"2026-02-12","url":"https://www.mynavi.jp/topics/post_52080.html"},{"title":"（第三報）当社が利用するクラウドサービスに対する不正アクセスの発生および個人情報流出の可能性について","publisher":"マイナビ","date":"2026-03-31","url":"https://www.mynavi.jp/json-topic/52681/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"マイナビ","en":"Mynavi"},"group":"access"},{"id":"b60685cb78","date":"2026-02-13","occurred":"2026-01-26","disclosed":"2026-02-13","org":{"ja":"日本医科大学武蔵小杉病院","en":"Nippon Medical School Musashi Kosugi Hospital"},"sector":"healthcare","type":"ransomware","via_vendor":false,"records":130000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"ナースコールシステムに障害、外来・入院・救急診療は継続","en":"Nurse-call system disrupted; outpatient, inpatient and emergency care continued"},"vector":{"ja":"医療機器保守用VPN装置の脆弱性","en":"Vulnerability in a VPN device used for medical-equipment maintenance"},"actor":null,"summary":{"ja":"日本医科大学武蔵小杉病院で医療機器保守用VPN装置の脆弱性を突かれ、ナースコールシステムのサーバがランサムウェア攻撃を受けた。患者約13万人分の氏名・住所・生年月日などが窃取された。","en":"Attackers exploited a medical-equipment maintenance VPN device at Nippon Medical School Musashi Kosugi Hospital and hit nurse-call servers with ransomware. Basic data on about 130,000 patients was stolen."},"sources":[{"title":"当院へのサイバー攻撃による個人情報漏洩に関するご報告とお詫び(第5報）","publisher":"日本医科大学武蔵小杉病院","date":"2026-02-27","url":"https://www.nms.ac.jp/kosugi-h/news/_28850.html"},{"title":"医療機器保守用 VPN 装置から侵入 ～ 日本医科大学武蔵小杉病院にランサムウェア攻撃","publisher":"ScanNetSecurity","date":"2026-02-18","url":"https://scan.netsecurity.ne.jp/article/2026/02/18/54648.html"},{"title":"約13万人の患者情報が漏えい ～ 日本医科大学武蔵小杉病院へのランサムウェア攻撃","publisher":"ScanNetSecurity","date":"2026-03-09","url":"https://scan.netsecurity.ne.jp/article/2026/03/09/54788.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日本医科大学武蔵小杉病院","en":"Nippon Medical School Musashi Kosugi Hospital"},"group":"ransomware"},{"id":"9dc81d9096","date":"2026-02-14","occurred":"2026-02-13","disclosed":"2026-02-14","org":{"ja":"ワシントンホテル株式会社","en":"Washington Hotel Corporation"},"sector":"services","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"一部ホテルでカード端末が使用不可、一部サーバが暗号化されバックアップから復旧","en":"Card terminals down at some hotels; some servers encrypted, restored from backup"},"vector":{"ja":"外部接続機器","en":"External connection device"},"actor":null,"summary":{"ja":"ワシントンホテルの一部サーバがランサムウェアで暗号化され、一部ホテルでクレジットカード端末が使えなくなった。侵入経路は外部接続機器だった。","en":"Ransomware encrypted some Washington Hotel servers and knocked out card terminals at some hotels. The entry point was an external connection device."},"sources":[{"title":"ランサムウェア感染被害のお知らせ","publisher":"ワシントンホテル","date":"2026-02-14","url":"https://www.washingtonhotel.co.jp/corporation/news/197/"},{"title":"ランサムウェア感染被害に関する調査結果および対応状況のお知らせ（最終報）","publisher":"ワシントンホテル","date":"2026-09-07","url":"https://www.washingtonhotel.co.jp/corporation/news/229/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ワシントンホテル","en":"Washington Hotel"},"group":"ransomware"},{"id":"0ec9cc2d34","date":"2026-02-17","occurred":null,"disclosed":"2026-02-17","org":{"ja":"独立行政法人エネルギー・金属鉱物資源機構（JOGMEC）","en":"Japan Organization for Metals and Energy Security (JOGMEC)"},"sector":"government","type":"data_leak","via_vendor":false,"records":2246,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"内部不正：退職する職員が業務で得た個人情報を持ち出した","en":"Insider: a departing employee took out personal data obtained at work"},"actor":"Former employee (insider)","summary":{"ja":"JOGMECの元職員が在職中に業務で得た鉱業権者2,246名の氏名を外部に持ち出した。","en":"A former JOGMEC employee took out the names of 2,246 mining-rights holders obtained while working there."},"sources":[{"title":"個人情報の漏えいに関するお詫びとご報告","publisher":"JOGMEC","date":"2026-02-17","url":"https://www.jogmec.go.jp/news/release/news_01_00048.html"}],"confidence":"high","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"攻撃による漏えいの件数ではない（設定ミス・人為的ミス・件数の集計値）ため合計に含めない","en":"not added to totals: not records leaked by an attack (misconfiguration, human error, or a count of cases)"},"short":{"ja":"エネルギー・金属鉱物資源機構","en":"Japan Organization for Metals and Energy Security"},"group":"access"},{"id":"e835d4e602","date":"2026-02-19","occurred":"2026-02-15","disclosed":"2026-02-19","org":{"ja":"株式会社アドバンテスト","en":"Advantest Corporation"},"sector":"manufacturing","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"一部システムを隔離・停止、生産・出荷・サポートは通常どおり","en":"Some systems isolated or shut down; production, shipping and support normal"},"vector":null,"actor":null,"summary":{"ja":"半導体試験装置大手アドバンテストのネットワークの一部に不正アクセスがあり、ランサムウェアが展開された可能性がある。生産・出荷は通常どおりとしている。","en":"Intruders accessed part of chip-test equipment maker Advantest's network and may have deployed ransomware. Production and shipping continued normally."},"sources":[{"title":"サイバーセキュリティインシデントに関するお知らせ","publisher":"アドバンテスト","date":"2026-02-19","url":"https://www.advantest.com/ja/news/2026/20260219.html"},{"title":"サイバーセキュリティインシデントに関するお知らせ（続報）","publisher":"アドバンテスト","date":"2026-03-04","url":"https://www.advantest.com/ja/news/2026/20260304.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"アドバンテスト","en":"Advantest"},"group":"ransomware"},{"id":"f722fbcc72","date":"2026-02-26","occurred":null,"disclosed":"2026-02-26","org":{"ja":"KDDIウェブコミュニケーションズ（法人向けレンタルサーバ「CPI」）","en":"KDDI Web Communications (CPI business hosting)"},"sector":"it_cloud","type":"ddos","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"一部プランでWeb・FTP障害が反復（例：2/26 8:20〜13:05、3/5 6:30〜11:35、3/10）","en":"Repeated web/FTP outages on some shared plans, e.g. 02-26 08:20–13:05, 03-05 06:30–11:35, 03-10 09:15–10:05"},"vector":{"ja":"断続的なDDoS攻撃","en":"Intermittent DDoS"},"actor":null,"summary":{"ja":"法人向けレンタルサーバ「CPI」が断続的なDDoS攻撃を受け、2月末から3月上旬に一部プランでWeb・FTPの障害が繰り返し起きた。","en":"Intermittent DDoS attacks on the CPI business hosting service caused repeated web and FTP outages from late February to early March."},"sources":[{"title":"DDoS攻撃による断続的なアクセス障害について（2026-02-26）","publisher":"CPI","date":"2026-02-26","url":"https://www.cpi.ad.jp/support/maintenance/incident/2026-02-26/"},{"title":"法人向けレンタルサーバ「CPI」に DDoS 攻撃","publisher":"ScanNetSecurity","date":"2026-03-18","url":"https://scan.netsecurity.ne.jp/article/2026/03/18/54858.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"KDDIウェブコミュニケーションズ","en":"KDDI Web Communications"},"group":"other"},{"id":"49e7294d24","date":"2026-03-03","occurred":"2026-03-01","disclosed":"2026-03-03","org":{"ja":"医療法人社団白梅会 白梅豊岡病院","en":"Shiraume Toyooka Hospital"},"sector":"healthcare","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"電子カルテなどのシステムが閲覧不能に","en":"Electronic medical records and other systems could not be viewed"},"vector":null,"actor":null,"summary":{"ja":"白梅豊岡病院がランサムウェア攻撃を受けて電子カルテなどが閲覧できなくなり、患者・家族の情報が漏えいした可能性がある。","en":"Ransomware made Shiraume Toyooka Hospital's electronic medical records unavailable, and patient and family data may have leaked."},"sources":[{"title":"厚生労働省初動対応チームの派遣を受け対応 ～ 白梅豊岡病院にランサムウェア攻撃","publisher":"ScanNetSecurity","date":"2026-03-10","url":"https://scan.netsecurity.ne.jp/article/2026/03/10/54802.html"},{"title":"白梅豊岡病院へのランサムウェア攻撃、ダークサイト上に利用者や家族等のフルデータを公開","publisher":"ScanNetSecurity","date":"2026-03-16","url":"https://scan.netsecurity.ne.jp/article/2026/03/16/54844.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"医療法人社団白梅会 白梅豊岡病院","en":"Shiraume Toyooka Hospital"},"group":"ransomware"},{"id":"d04c0a62e5","date":"2026-03-06","occurred":"2026-02-28","disclosed":"2026-03-06","org":{"ja":"株式会社村田製作所","en":"Murata Manufacturing Co., Ltd."},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":88000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"なし（生産・販売への影響なし）","en":"None; production and sales unaffected"},"vector":null,"actor":null,"summary":{"ja":"村田製作所のIT環境に不正アクセスがあり、従業員・関係者と取引先などの個人情報約8.8万件と一部の取引書類が取得された。","en":"Intruders in Murata's IT environment took about 88,000 personal records of employees and business contacts, plus some invoices and contracts."},"sources":[{"title":"当社のIT環境への不正アクセスに関するお知らせ","publisher":"村田製作所","date":"2026-03-06","url":"https://corporate.murata.com/ja-jp/newsroom/news/company/general/2026/0306"},{"title":"当社のIT環境への不正アクセスに関するお知らせ（第三報）","publisher":"村田製作所","date":"2026-04-27","url":"https://corporate.murata.com/ja-jp/newsroom/news/company/general/2026/0427"},{"title":"村田製作所への不正アクセス 第3報、約8.8万件の個人情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-04-30","url":"https://scan.netsecurity.ne.jp/article/2026/04/30/55176.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"村田製作所","en":"Murata Manufacturing"},"group":"access"},{"id":"986de97348","date":"2026-03-16","occurred":null,"disclosed":"2026-03-16","org":{"ja":"岩谷産業株式会社","en":"Iwatani Corporation"},"sector":"infrastructure_energy","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"岩谷産業は同社とグループ会社のシステムの一部で不正アクセスを確認したと公表した。","en":"Iwatani disclosed unauthorised access to some systems at the company and its group companies."},"sources":[{"title":"当社グループシステムに対する不正アクセスの発生について","publisher":"岩谷産業","date":"2026-03-16","url":"https://www.iwatani.co.jp/jpn/news/files/2026/20260316_news.pdf"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"岩谷産業","en":"Iwatani"},"group":"access"},{"id":"02cee8764c","date":"2026-03-17","occurred":"2026-03-13","disclosed":"2026-03-17","org":{"ja":"株式会社メディカ出版","en":"Medica Shuppan Co., Ltd."},"sector":"media_entertainment","type":"ransomware","via_vendor":false,"records":772000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"受注・発送・問い合わせ窓口が停止、4月号の定期刊行物が1〜3週間遅延","en":"Order, shipping and inquiry desk stopped; April periodicals delayed 1–3 weeks"},"vector":null,"actor":null,"summary":{"ja":"医療・看護系出版社のメディカ出版がランサムウェア攻撃を受け、受注・発送が止まった。顧客・著者・取引先などの個人情報約77万2,000件が漏えいした可能性がある。","en":"Ransomware hit medical and nursing publisher Medica Shuppan, halting orders and shipping. About 772,000 personal records of customers, authors and partners may have leaked."},"sources":[{"title":"不正アクセス（ランサムウェア）被害に関するご報告と現在の状況について（第3報）","publisher":"メディカ出版","date":"2026-04-09","url":"https://www.medica.co.jp/news/information/3479/"},{"title":"メディカ出版へのランサムウェア攻撃、合計 77 万 2,000 件の個人情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-04-30","url":"https://scan.netsecurity.ne.jp/article/2026/04/30/55173.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"メディカ出版","en":"Medica Shuppan"},"group":"ransomware"},{"id":"9912491ac6","date":"2026-03-19","occurred":null,"disclosed":"2026-03-19","org":{"ja":"マツダ株式会社","en":"Mazda Motor Corporation"},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":692,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"タイからの調達部品の倉庫業務に使う管理システムの脆弱性","en":"Vulnerability in the management system for warehousing parts procured from Thailand"},"actor":null,"summary":{"ja":"マツダのタイ調達部品の倉庫管理システムが脆弱性を突かれ、自社・取引先従業員692件の情報が流出した可能性がある。","en":"A flaw in Mazda's warehouse system for parts sourced from Thailand was exploited, possibly exposing 692 records of Mazda and supplier staff."},"sources":[{"title":"不正アクセス発生による個人情報流出可能性のお知らせとおわび","publisher":"マツダ","date":"2026-03-19","url":"https://newsroom.mazda.com/ja/publicity/release/2026/202603/260319b.pdf"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"マツダ","en":"Mazda Motor"},"group":"access"},{"id":"ffbb442d6a","date":"2026-03-30","occurred":"2026-03-27","disclosed":"2026-03-30","org":{"ja":"コタ株式会社","en":"Cota Co., Ltd."},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":109147,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"全サーバ・PCをネットワークから遮断","en":"All servers and PCs disconnected from the network"},"vector":null,"actor":null,"summary":{"ja":"ヘア化粧品メーカーのコタでサイバー攻撃によるシステム障害が起き、株主・顧客・取引先など約10万9千件の個人情報が閲覧された可能性がある。","en":"A cyberattack caused a system outage at hair-care maker Cota, and about 109,000 shareholder, customer and partner records may have been viewed."},"sources":[{"title":"サイバー攻撃によるシステム障害発生のお知らせ（第１報）","publisher":"コタ","date":"2026-03-30","url":"https://ssl4.eir-parts.net/doc/4923/tdnet/2782863/00.pdf"},{"title":"お客さまの個人情報に関するお知らせとお詫び","publisher":"コタ","date":"2026-08-20","url":"https://media.cota.co.jp/media/c461e507-b70e-4543-81b6-38210d442a3b.pdf"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"コタ","en":"Cota"},"group":"access"},{"id":"1a4b4346d2","date":"2026-04-03","occurred":"2026-04-02","disclosed":"2026-04-03","org":{"ja":"株式会社CAMPFIRE","en":"CAMPFIRE, Inc."},"sector":"finance","type":"unauthorized_access","via_vendor":false,"records":225846,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"社員のGitHub認証情報が私的な開発用サーバに誤って置かれ、GitHub内のクラウド認証情報で管理環境の一部に侵入","en":"An employee's GitHub credential was accidentally uploaded to a personal-development server; the attacker then found cloud credentials in GitHub and reached part of the admin environment"},"actor":null,"summary":{"ja":"クラウドファンディング大手CAMPFIREのGitHubアカウントが不正利用されて社内クラウドにも侵入され、口座情報を含む最大22.5万人分の個人情報が閲覧された可能性がある。","en":"A leaked employee GitHub credential let attackers into CAMPFIRE's GitHub and then its cloud environment, and data on up to 225,846 people, some with bank details, may have been viewed."},"sources":[{"title":"CAMPFIRE、最大22.5万人分の個人情報漏えいか　一部口座情報も","publisher":"ITmedia NEWS","date":"2026-04-24","url":"https://www.itmedia.co.jp/news/articles/2604/24/news126.html"},{"title":"不正アクセス事案にかかる調査結果について","publisher":"CAMPFIRE","date":"2026-06-02","url":"https://campfire.co.jp/press/2026/06/02/campfire/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"CAMPFIRE","en":"CAMPFIRE"},"group":"access"},{"id":"50351ad481","date":"2026-04-03","occurred":"2026-04-02","disclosed":"2026-04-03","org":{"ja":"株式会社YCC情報システム（山形市・山形県ほか委託元）","en":"YCC Information Systems (Yamagata IT contractor)"},"sector":"it_cloud","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"ファイルサーバが暗号化","en":"File server encrypted"},"vector":{"ja":"推定：ネットワーク機器の管理者認証情報が推測または窃取された","en":"Presumed: network-device admin credentials guessed or obtained"},"actor":null,"summary":{"ja":"山形のIT事業者YCC情報システムがランサムウェア被害を受け、自治体や企業から預かった個人情報が漏えいした可能性がある。山形市ではマイナンバーを含む人事給与情報も対象となった。","en":"Ransomware hit Yamagata IT contractor YCC, and data entrusted by municipalities and companies may have leaked. Yamagata City's exposure includes payroll data with My Number."},"sources":[{"title":"株式会社YCC情報システムに対するサイバー攻撃に係る山形市保有個人情報の漏えいのおそれがある事案について","publisher":"山形市","date":"2026-07-30","url":"https://www.city.yamagata-yamagata.lg.jp/shiseijoho/it/1012825/1018734.html"},{"title":"YCC情報システムにランサムウェア攻撃、自治体などから受託している個人情報漏えいのおそれ","publisher":"INTERNET Watch","date":"2026-04-20","url":"https://internet.watch.impress.co.jp/docs/news/2102758.html"},{"title":"【重要】ランサムウェア攻撃に関するお知らせ（第五報）","publisher":"YCC情報システム","date":"2026-05-20","url":"https://www.yamagata-ycc.co.jp/news/20260520-1/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"YCC情報システム","en":"YCC Information Systems"},"group":"ransomware"},{"id":"14a48d5c34","date":"2026-04-03","occurred":null,"disclosed":"2026-04-03","org":{"ja":"株式会社阿波銀行","en":"The Awa Bank, Ltd."},"sector":"finance","type":"unauthorized_access","via_vendor":false,"records":27745,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"OAシステムのテスト環境への不正アクセス","en":"Unauthorised access to a test environment of the bank's OA system"},"actor":null,"summary":{"ja":"阿波銀行のOAシステムのテスト環境に不正アクセスがあり、顧客情報など延べ27,745件が漏えいした。","en":"Attackers got into a test environment of Awa Bank's office system and took a cumulative 27,745 customer and other records."},"sources":[{"title":"阿波銀行のテスト環境に不正アクセス、顧客情報等のべ 27,745 件の漏えいを確認","publisher":"ScanNetSecurity","date":"2026-04-22","url":"https://scan.netsecurity.ne.jp/article/2026/04/22/55113.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"阿波銀行","en":"The Awa Bank"},"group":"access"},{"id":"e42dab1f25","date":"2026-04-08","occurred":"2026-04-05","disclosed":"2026-04-08","org":{"ja":"株式会社いえらぶGROUP（いえらぶCLOUD）","en":"ielove GROUP (ielove CLOUD real-estate SaaS)"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"システムの脆弱性と、インフォスティーラーで窃取されたとみられる顧客企業の認証情報","en":"System vulnerability plus client credentials likely stolen by infostealer malware"},"actor":null,"summary":{"ja":"不動産業向けクラウド「いえらぶCLOUD」に不正アクセスがあり、利用する不動産会社の顧客の氏名・連絡先などが流出した可能性がある。","en":"Attackers accessed the ielove CLOUD real-estate platform, and data client agencies held on their customers may have leaked."},"sources":[{"title":"当社のクラウドサービスへの不正アクセスに関するお知らせ","publisher":"いえらぶGROUP","date":"2026-04-08","url":"https://www.ielove-group.jp/news/detail-1371"},{"title":"いえらぶGROUPへの不正アクセス、システムにおける脆弱性が発端に","publisher":"ScanNetSecurity","date":"2026-05-11","url":"https://scan.netsecurity.ne.jp/article/2026/05/11/55226.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"いえらぶGROUP","en":"ielove GROUP"},"group":"access"},{"id":"9f62f99c46","date":"2026-04-23","occurred":null,"disclosed":"2026-04-23","org":{"ja":"株式会社2りんかんイエローハット","en":"2Rinkan Yellow Hat Co., Ltd."},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":3179454,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"4月から会員アプリの一部を停止、2026年10月に再開予定","en":"Member app partly suspended since April; reopening planned October 2026"},"vector":{"ja":"会員アプリのAPIの悪用","en":"Abuse of the member app's API"},"actor":null,"summary":{"ja":"バイク用品店「2りんかん」のアプリのAPIが悪用され、会員約318万人の氏名・住所・アプリのパスワードなどが漏えいした。","en":"Attackers abused the 2Rinkan motorcycle-store app's API and took data on about 3.18 million members, including names, addresses and app passwords."},"sources":[{"title":"当社における不正アクセスによる個人情報漏えいに関するお詫びとお知らせ【最終報】","publisher":"2りんかんイエローハット","date":"2026-06-19","url":"https://2rinkan.jp/annai/20260423/"},{"title":"2りんかんイエローハットに不正アクセス、310万名分の個人情報が漏えい","publisher":"ScanNetSecurity","date":"2026-07-01","url":"https://scan.netsecurity.ne.jp/article/2026/07/01/55609.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"2りんかんイエローハット","en":"2Rinkan Yellow Hat"},"group":"access"},{"id":"bc7bd6047e","date":"2026-04-24","occurred":"2026-04-20","disclosed":"2026-04-24","org":{"ja":"株式会社はてな","en":"Hatena Co., Ltd."},"sector":"it_cloud","type":"other","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":1179000000,"outage":null,"vector":{"ja":"ソーシャルエンジニアリング：経理責任者が捜査協力と信じ込まされ虚偽の送金指示に従った","en":"Social engineering: the head of accounting followed false transfer instructions, believing they were part of cooperating with an investigation"},"actor":null,"summary":{"ja":"はてなの経理責任者が第三者の虚偽の指示に従って会社資金を外部口座へ送金し、11億7,900万円の特別損失を計上した。","en":"Hatena's head of accounting followed a fraudster's false instructions and wired company funds out; Hatena booked a ¥1.179 billion special loss."},"sources":[{"title":"資金流出事案の発生に関するお知らせ","publisher":"はてな（TDnet）","date":"2026-04-24","url":"https://ssl4.eir-parts.net/doc/3930/tdnet/2794871/00.pdf"},{"title":"はてな資金流出、11 億 7,900 万円を特別損失として計上","publisher":"ScanNetSecurity","date":"2026-06-25","url":"https://scan.netsecurity.ne.jp/article/2026/06/25/55569.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"はてな","en":"Hatena"},"group":"other"},{"id":"6813c98984","date":"2026-04-28","occurred":null,"disclosed":"2026-04-28","org":{"ja":"内閣府沖縄総合事務局（FileZen専用サーバ）","en":"Okinawa General Bureau, Cabinet Office (FileZen server)"},"sector":"government","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"ソリトンシステムズのファイル転送サーバFileZenの脆弱性","en":"Vulnerability in the Soliton Systems FileZen file-transfer server"},"actor":null,"summary":{"ja":"ソリトンシステムズのファイル転送サービスFileZenの専用サーバが脆弱性を突かれ、沖縄総合事務局の個人情報が流出した可能性がある。","en":"A flaw in Soliton's FileZen file-transfer server was exploited, and personal data held by the Okinawa General Bureau may have leaked."},"sources":[{"title":"FileZen 専用サーバへの不正アクセス、内閣府沖縄総合事務局が保有の個人情報漏えいの可能性","publisher":"ScanNetSecurity","date":"2026-05-01","url":"https://scan.netsecurity.ne.jp/article/2026/05/01/55185.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"内閣府沖縄総合事務局","en":"Okinawa General Bureau, Cabinet Office"},"group":"access"},{"id":"41a51a110b","date":"2026-04-30","occurred":null,"disclosed":"2026-04-30","org":{"ja":"カゴヤ・ジャパン株式会社","en":"KAGOYA JAPAN Inc."},"sector":"it_cloud","type":"ddos","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"4月30日8時20分頃からWebメールActive!mailや管理画面が利用不可・低速に","en":"Active!mail webmail and control panels unreachable or slow from ~08:20 on 04-30"},"vector":{"ja":"海外IPアドレスからのDDoS攻撃","en":"DDoS from overseas IPs"},"actor":null,"summary":{"ja":"レンタルサーバー事業者カゴヤ・ジャパンが海外IPからのDDoS攻撃を受け、WebメールActive!mailや管理画面が使いにくくなった。","en":"A DDoS from overseas IPs disrupted KAGOYA JAPAN's hosted Active!mail webmail and control panels."},"sources":[{"title":"Webメール「Active!mail」に海外IPアドレスからDDoS攻撃","publisher":"ScanNetSecurity","date":"2026-05-19","url":"https://scan.netsecurity.ne.jp/article/2026/05/19/55297.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"カゴヤ・ジャパン","en":"KAGOYA JAPAN"},"group":"other"},{"id":"5e0390c285","date":"2026-05-01","occurred":"2026-04-16","disclosed":"2026-05-01","org":{"ja":"国立大学法人東北大学（大学病院 治験業務用NAS）","en":"Tohoku University (hospital clinical-trial NAS)"},"sector":"education","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"東北大学のサーバに不正アクセスがあり、大学病院の治験資料を保存したNASにも侵入され、患者情報が漏えいした可能性がある。","en":"Intruders reached a Tohoku University server and a hospital NAS holding clinical-trial files, so patient data may have leaked."},"sources":[{"title":"東北大学に不正アクセス、大学病院のNASに保存されていた個人情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-05-20","url":"https://scan.netsecurity.ne.jp/article/2026/05/20/55308.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"東北大学","en":"Tohoku University"},"group":"access"},{"id":"02cb72bdd0","date":"2026-05-01","occurred":null,"disclosed":"2026-05-01","org":{"ja":"株式会社マネーフォワード","en":"Money Forward, Inc."},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"銀行口座連携を一時停止し、2026年5月12日から段階的に再開","en":"Bank-account linkage paused, resumed in stages from 2026-05-12"},"vector":{"ja":"漏えいしたGitHub認証情報でリポジトリを複製","en":"Leaked GitHub credentials used to copy repositories"},"actor":null,"summary":{"ja":"マネーフォワードのGitHub認証情報が漏えいしてリポジトリを複製され、ファイル内の一部個人情報が流出した可能性がある。","en":"Leaked GitHub credentials let a third party copy Money Forward's repositories, which contained some personal data."},"sources":[{"title":"『GitHub』への不正アクセス発生に関するお知らせとお詫び（第一報）","publisher":"マネーフォワード","date":"2026-05-01","url":"https://corp.moneyforward.com/news/info/20260501-mf-press-1/"},{"title":"GitHubへの不正アクセスに関する詳細調査の完了およびセキュリティ対策強化のお知らせ（第四報）","publisher":"マネーフォワード","date":"2026-06-23","url":"https://corp.moneyforward.com/news/info/20260623-mf-press-1/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"マネーフォワード","en":"Money Forward"},"group":"access"},{"id":"fd00cb87d5","date":"2026-05-30","occurred":"2026-05-26","disclosed":"2026-05-30","org":{"ja":"株式会社キャリアデザインセンター（女の転職 type）","en":"Career Design Center (job site 'Onna no Tenshoku type')"},"sector":"services","type":"account_takeover","via_vendor":false,"records":18253,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"リスト型攻撃（試行1,141,828回）","en":"Credential stuffing (1,141,828 attempts)"},"actor":null,"summary":{"ja":"転職サイト「女の転職 type」がリスト型攻撃を受け、1万8,253人分の会員情報が閲覧された可能性がある。","en":"Credential stuffing against the job site 'Onna no Tenshoku type' may have exposed 18,253 members' profiles."},"sources":[{"title":"「女の転職 type」にリスト型アカウントハッキング、不正ログイン 38,442 件に","publisher":"ScanNetSecurity","date":"2026-06-12","url":"https://scan.netsecurity.ne.jp/article/2026/06/12/55481.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"キャリアデザインセンター","en":"Career Design Center"},"group":"other"},{"id":"1e961a7250","date":"2026-06-01","occurred":"2026-05-30","disclosed":"2026-06-01","org":{"ja":"polyfill.io経由の不審な認証画面表示（東芝・SUBARU・良品計画・日本製鉄・SCSK・JRAシステムサービス・ディスクユニオン・ARBAN）","en":"polyfill.io-linked fake sign-in prompts on Japanese corporate sites (Toshiba, SUBARU, Ryohin Keikaku, Nippon Steel, SCSK, JRA System Service, Disk Union, ARBAN)"},"sector":"other","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":8,"cost_jpy":null,"outage":{"ja":"スクリプト削除まで偽のサインイン画面が表示","en":"Fake sign-in dialogs shown until the script was removed"},"vector":{"ja":"外部から読み込んでいたpolyfill.ioのスクリプト","en":"Externally loaded polyfill.io script"},"actor":null,"summary":{"ja":"外部スクリプトpolyfill.ioを読み込んでいた東芝やSUBARU、良品計画、日本製鉄などのサイトで不審な認証画面が表示され、各社が注意を呼びかけた。","en":"Sites of Toshiba, SUBARU, MUJI's operator, Nippon Steel and others that loaded the polyfill.io script showed fake sign-in prompts, prompting warnings from each company."},"sources":[{"title":"東芝ウェブサイトの一部で不審なサインイン画面、6 / 4 対応完了","publisher":"ScanNetSecurity","date":"2026-06-10","url":"https://scan.netsecurity.ne.jp/article/2026/06/10/55460.html"},{"title":"良品計画サイトで不審な認証画面が表示される事象","publisher":"ScanNetSecurity","date":"2026-06-10","url":"https://scan.netsecurity.ne.jp/article/2026/06/10/55461.html"},{"title":"ディスクユニオンのウェブサイトで不審な認証画面が表示される事象","publisher":"ScanNetSecurity","date":"2026-06-10","url":"https://scan.netsecurity.ne.jp/article/2026/06/10/55462.html"},{"title":"カルチャーメディア「ARBAN」で不審な認証画面が表示される事象","publisher":"ScanNetSecurity","date":"2026-06-10","url":"https://scan.netsecurity.ne.jp/article/2026/06/10/55463.html"},{"title":"「SUBARUオンラインショップ」で不審な認証画面の表示","publisher":"ScanNetSecurity","date":"2026-06-16","url":"https://scan.netsecurity.ne.jp/article/2026/06/16/55502.html"},{"title":"JRAシステムサービスの一部ページで不審な認証画面の表示","publisher":"ScanNetSecurity","date":"2026-06-17","url":"https://scan.netsecurity.ne.jp/article/2026/06/17/55512.html"},{"title":"SCSK 公式ホームページで不審な認証表示","publisher":"ScanNetSecurity","date":"2026-06-18","url":"https://scan.netsecurity.ne.jp/article/2026/06/18/55523.html"},{"title":"日本製鉄ホームページで不審な認証画面","publisher":"ScanNetSecurity","date":"2026-06-19","url":"https://scan.netsecurity.ne.jp/article/2026/06/19/55531.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"polyfill.io経由の不審な認証画面表示","en":"polyfill.io-linked fake sign-in prompts on Japanese corporate sites"},"group":"access"},{"id":"758d1dd2db","date":"2026-06-10","occurred":"2026-05-25","disclosed":"2026-06-10","org":{"ja":"国立大学法人九州大学（研究室の端末）","en":"Kyushu University (research-lab terminal)"},"sector":"education","type":"ransomware","via_vendor":false,"records":43,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"九州大学の研究室の端末がランサムウェアに感染したとみられ、患者43名の氏名と手術動画データが流出した可能性がある。","en":"A Kyushu University lab terminal appears to have been hit by ransomware; names and surgical videos of 43 patients may have been taken."},"sources":[{"title":"九州大学の端末がランサムウェア感染、患者43名の氏名と手術動画データが外部流出した可能性を否定できない状況","publisher":"ScanNetSecurity","date":"2026-06-23","url":"https://scan.netsecurity.ne.jp/article/2026/06/23/55549.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"九州大学","en":"Kyushu University"},"group":"ransomware"},{"id":"a3bcf30a6f","date":"2026-06-15","occurred":"2025-03-21","disclosed":"2026-06-15","org":{"ja":"株式会社佐嘉平川屋（オンラインショップ）","en":"Saga Hirakawaya Co., Ltd. (online shop)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":30170,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"2026年3月9日からオンラインショップのカード決済を停止","en":"Card payments on the online shop suspended from 2026-03-09"},"vector":{"ja":"ショップの脆弱性を突き決済アプリを改ざん、委託先サーバの不正ファイルで入力情報を外部送信","en":"Shop-system vulnerability exploited; payment app altered and a malicious file on the contractor's server sent entered data out (e-skimming)"},"actor":null,"summary":{"ja":"佐嘉平川屋の通販サイトで決済アプリが改ざんされ、入力されたカード情報と個人情報が外部に送られていた可能性がある。2026年3月にカード会社からの連絡で発覚した。","en":"Saga Hirakawaya's online shop had its payment app tampered with, so card and personal data entered by customers may have gone to an attacker. Card companies flagged it in March 2026."},"sources":[{"title":"不正アクセスによる個人情報漏えいのお詫びとご報告","publisher":"佐嘉平川屋","date":"2026-06-15","url":"https://www.saga-hirakawaya.jp/security-notice/"},{"title":"「佐嘉平川屋オンラインショップ」に不正アクセス、5,783 名のカード情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-06-26","url":"https://scan.netsecurity.ne.jp/article/2026/06/26/55581.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"佐嘉平川屋","en":"Saga Hirakawaya"},"group":"access"},{"id":"31173056ae","date":"2026-06-16","occurred":"2026-04-23","disclosed":"2026-06-16","org":{"ja":"株式会社小松製作所（コマツ）","en":"Komatsu Ltd."},"sector":"manufacturing","type":"misconfiguration","via_vendor":false,"records":139302,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"外部ユーザー管理システムの設定誤り","en":"Configuration error in the external-user management system"},"actor":null,"summary":{"ja":"コマツの外部ユーザー招待用管理システムの設定誤りで、登録者13万9,302人の氏名やメールアドレスが他の登録者から見える状態だった。","en":"A setting error in Komatsu's external-user system let registered users see the names and emails of 139,302 others."},"sources":[{"title":"個人情報が閲覧可能な状態にあったことに関するお知らせ","publisher":"コマツ","date":"2026-06-16","url":"https://www.komatsu.jp/ja/newsroom/2026/20260616_3"}],"confidence":"high","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"攻撃による漏えいの件数ではない（設定ミス・人為的ミス・件数の集計値）ため合計に含めない","en":"not added to totals: not records leaked by an attack (misconfiguration, human error, or a count of cases)"},"short":{"ja":"小松製作所","en":"Komatsu"},"group":"access"},{"id":"131a1224d2","date":"2026-06-23","occurred":"2026-04-21","disclosed":"2026-06-23","org":{"ja":"NTTPCコミュニケーションズ（WebARENA 大容量ファイル転送機能）","en":"NTTPC Communications (WebARENA large-file transfer)"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":7446,"affected_orgs":1510,"cost_jpy":null,"outage":{"ja":"2026年4月29日から機能停止、再構築中で再開は2026年12月頃が目途","en":"Feature suspended since 2026-04-29; rebuild, resumption targeted ~Dec 2026"},"vector":null,"actor":null,"summary":{"ja":"WebARENAの大容量ファイル転送機能のサーバに不正アクセスがあり、メールアドレス7,446件とアップロードファイル4,463件が漏えいした可能性がある。","en":"Servers behind WebARENA's large-file transfer feature were accessed, possibly exposing 7,446 email addresses and 4,463 uploaded files."},"sources":[{"title":"「WebARENA 大容量ファイル転送機能」停止についてのお詫びとご報告","publisher":"NTTPCコミュニケーションズ","date":"2026-06-23","url":"https://www.nttpc.co.jp/press/info/2026/06/202606231101.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"NTTPCコミュニケーションズ","en":"NTTPC Communications"},"group":"access"},{"id":"2c615b50f9","date":"2026-06-23","occurred":"2026-05-16","disclosed":"2026-06-23","org":{"ja":"KDDI株式会社（ISP事業者向けメールシステム）","en":"KDDI Corporation (mail platform for ISP operators)"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":12231954,"affected_orgs":6,"cost_jpy":null,"outage":{"ja":"影響を受けたISPでパスワードを強制変更","en":"Forced password resets at the affected ISPs"},"vector":{"ja":"KDDIのISP向けメール基盤に組み込まれた第三者製ソフトのゼロデイ脆弱性（製品・ベンダーは非公表）","en":"Zero-day in third-party software built into KDDI's ISP mail platform (product and vendor not named)"},"actor":null,"summary":{"ja":"KDDIがISP向けに提供するメール基盤の第三者製ソフトのゼロデイ脆弱性が悪用され、BIGLOBE・@nifty・J:COMなど6事業者の約1,223万件のメールアドレスと、うち約762万件のパスワードが漏えいした。","en":"A zero-day in third-party software inside KDDI's mail platform for ISPs leaked about 12.23 million email addresses at six providers, including BIGLOBE, @nifty and J:COM, with 7.62 million passwords."},"sources":[{"title":"KDDI、メアドなど最大1422万件漏えいか　ISP事業者向けシステムに不正アクセス","publisher":"ITmedia NEWS","date":"2026-06-23","url":"https://www.itmedia.co.jp/news/articles/2606/23/news114.html"},{"title":"KDDI、ISP向けメールシステムへの不正アクセスで続報。1223万件のメールアドレス、762万件のパスワードが漏えい","publisher":"INTERNET Watch","date":"2026-07-06","url":"https://internet.watch.impress.co.jp/docs/news/2122740.html"},{"title":"ISP 事業者向けメールシステムに対する不正アクセスについてのお詫びとご報告","publisher":"KDDI","date":"2026-07-06","url":"https://newsroom.kddi.com/news/assets/2026/kddi_nr_s-73_4619/kddi_nr_s-73_4619_pdf_01.pdf"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"KDDI","en":"KDDI"},"group":"access"},{"id":"6655fd5af3","date":"2026-06-30","occurred":"2026-06-15","disclosed":"2026-06-30","org":{"ja":"学校法人武蔵野大学","en":"Musashino University (educational corporation)"},"sector":"education","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"なし（バックアップから復旧）","en":"None; restored from backups"},"vector":null,"actor":null,"summary":{"ja":"武蔵野大学の法人サーバがランサムウェアに感染した。当初は流出なしとしたが、9月の第二報で氏名・住所を含むファイルの流出が判明した。","en":"Ransomware hit Musashino University's corporate servers. It first reported no data loss, but a September update confirmed files with names and addresses were taken."},"sources":[{"title":"不正アクセスによるシステム障害について","publisher":"武蔵野大学","date":"2026-06-30","url":"https://ef.musashino-u.ac.jp/news/20260630-8443.html"},{"title":"不正アクセスによるシステム障害について（第二報）","publisher":"武蔵野大学","date":"2026-09-07","url":"https://ef.musashino-u.ac.jp/news/20260907-8715.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"武蔵野大学","en":"Musashino University"},"group":"ransomware"},{"id":"77537509cc","date":"2026-06-30","occurred":"2026-06-15","disclosed":"2026-06-30","org":{"ja":"アフラック生命保険株式会社","en":"Aflac Life Insurance Japan Ltd."},"sector":"finance","type":"unauthorized_access","via_vendor":false,"records":4380000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"2026年6月25日から契約者向けサイト「アフラック よりそうネット」と関連システムを停止","en":"Policyholder site 「アフラック よりそうネット」 and related systems shut down from 2026-06-25"},"vector":null,"actor":null,"summary":{"ja":"アフラック生命の契約者向けサイトなどに繰り返し不正アクセスがあり、約438万人の契約者情報と、うち約23万人分の保険料振替口座情報が漏えいした。","en":"Repeated intrusions into Aflac Japan's policyholder portal leaked data on about 4.38 million policyholders, including premium-payment bank details for about 230,000."},"sources":[{"title":"アフラックに不正アクセス、約438万人分の個人情報漏えい　口座情報23万件も","publisher":"ITmedia NEWS","date":"2026-06-30","url":"https://www.itmedia.co.jp/news/articles/2606/30/news133.html"},{"title":"アフラック、不正アクセスで438万人の個人情報漏えい","publisher":"Impress Watch","date":"2026-06-30","url":"https://www.watch.impress.co.jp/docs/news/2121209.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"アフラック生命保険","en":"Aflac Life Insurance Japan"},"group":"access"},{"id":"b9f530f487","date":"2026-07-01","occurred":"2026-06-22","disclosed":"2026-07-01","org":{"ja":"加賀ソルネット株式会社（アカデミコナビ）","en":"Kaga Solnet (Academico Navi e-commerce site)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":170000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"大学向けPC等の販売サイト「アカデミコナビ」に第三者の不正アクセスがあり、最大約17万件の登録情報（氏名・住所・電話・メール・暗号化パスワード）が漏えいした可能性がある。","en":"Academico Navi, a site selling PCs and software to university students, was breached. Up to about 170,000 user records (name, address, phone, email, encrypted password) may have leaked."},"sources":[{"title":"当社ECサイトに対する不正アクセスに関するご報告とお詫び","publisher":"加賀ソルネット","date":"2026-07-01","url":"https://www.kgem.co.jp/news/news260701/"},{"title":"加賀ソルネット運営の「アカデミコナビ」に不正アクセス、最大約 17 万件の個人情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-07-13","url":"https://scan.netsecurity.ne.jp/article/2026/07/13/55685.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"加賀ソルネット","en":"Kaga Solnet"},"group":"access"},{"id":"204a865f7e","date":"2026-07-02","occurred":"2026-06-19","disclosed":"2026-07-02","org":{"ja":"名鉄協商株式会社","en":"Meitetsu Kyosho Co., Ltd."},"sector":"logistics_transport","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"個人・法人向けの一部サービスを停止。カーシェア「Calitecho」の新規入会に影響","en":"Some services for individuals and businesses suspended; Calitecho car-share new sign-ups affected"},"vector":null,"actor":null,"summary":{"ja":"6月23日にサーバへの不審なアクセスを検知し、調査で6月19日付のランサムウェア関連の侵入痕跡を確認した。個人・法人向けサービスの一部が停止した。","en":"Suspicious server access was detected on 23 June, and the investigation found ransomware-related intrusion traces dated 19 June. Some services for individuals and businesses were suspended."},"sources":[{"title":"名鉄協商にランサムウェア攻撃、個人および法人向けサービスの一部が停止","publisher":"ScanNetSecurity","date":"2026-07-31","url":"https://scan.netsecurity.ne.jp/article/2026/07/31/55831.html"},{"title":"名鉄協商にランサムウェア攻撃、カーシェア「カリテコ」の顧客情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-08-26","url":"https://scan.netsecurity.ne.jp/article/2026/08/26/56030.html"},{"title":"不正アクセスによるシステム障害発生に関するお知らせ","publisher":"名鉄協商","date":"2026-07-02","url":"https://www.mkyosho.co.jp/news/2026/07/02/13-726/"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"名鉄協商","en":"Meitetsu Kyosho"},"group":"ransomware"},{"id":"8befd4b5e7","date":"2026-07-03","occurred":"2026-04-28","disclosed":"2026-07-03","org":{"ja":"株式会社テレビ朝日メディアプレックス","en":"TV Asahi Mediaplex"},"sector":"media_entertainment","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"関連サーバーを停止し、外部ネットワークから遮断","en":"Related servers shut down and cut off from external networks"},"vector":null,"actor":null,"summary":{"ja":"自社サーバへの不正アクセスが4月28日に確認され、個人情報を含む一部情報の漏えい可能性が判明した。7月30日の続報ではマイナンバーを含む従業員情報の漏えい可能性が示された。","en":"Unauthorized access to a company server was found on 28 April, and some information including personal data may have leaked. A 30 July follow-up said employee data including My Number may be involved."},"sources":[{"title":"テレビ朝日メディアプレックスに不正アクセス","publisher":"ScanNetSecurity","date":"2026-07-13","url":"https://scan.netsecurity.ne.jp/article/2026/07/13/55688.html"},{"title":"2026年8月の情報漏えい事故 原因別 記事一覧:不正アクセス","publisher":"ScanNetSecurity","date":"2026-08-31","url":"https://scan.netsecurity.ne.jp/special/3359/202608/%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84%E4%BA%8B%E6%95%85%E3%80%80%E5%8E%9F%E5%9B%A0%E5%88%A5%E3%80%80%E8%A8%98%E4%BA%8B%E4%B8%80%E8%A6%A7%EF%BC%9A%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"テレビ朝日メディアプレックス","en":"TV Asahi Mediaplex"},"group":"access"},{"id":"30dc8ddc26","date":"2026-07-08","occurred":"2026-06-27","disclosed":"2026-07-08","org":{"ja":"株式会社サカタのタネ（ブラジル子会社）","en":"Sakata Seed (Sakata Seed Sudamerica, Brazil)"},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"ブラジル連結子会社のサーバへの不正アクセスを検知し、一部情報にアクセスされ漏えいした可能性があると判断した。","en":"Unauthorized access to a server at the Brazilian subsidiary was detected, and the company judged some information may have been accessed and leaked."},"sources":[{"title":"サカタのタネ ブラジル連結子会社にサイバー攻撃、一部情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-07-31","url":"https://scan.netsecurity.ne.jp/article/2026/07/31/55833.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"サカタのタネ","en":"Sakata Seed"},"group":"access"},{"id":"7071eceabb","date":"2026-07-08","occurred":"2026-06-29","disclosed":"2026-07-08","org":{"ja":"住友重機械工業株式会社（海外グループ会社）","en":"Sumitomo Heavy Industries (overseas group company)"},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"6月29日に海外グループ会社のサーバへの不正アクセスを確認し、外部アクセスを遮断して調査中。","en":"Unauthorized access to an overseas group company's server was confirmed on 29 June. External access was blocked and an investigation started."},"sources":[{"title":"海外グループ会社サーバーへの不正アクセスについて","publisher":"住友重機械工業","date":"2026-07-08","url":"https://www.shi.co.jp/info/2026/6kgpsq000000ohdk.html"},{"title":"住友重機械工業の海外グループ会社に不正アクセス","publisher":"ScanNetSecurity","date":"2026-07-30","url":"https://scan.netsecurity.ne.jp/article/2026/07/30/55820.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"住友重機械工業","en":"Sumitomo Heavy Industries"},"group":"access"},{"id":"8888b14222","date":"2026-07-08","occurred":"2026-07-06","disclosed":"2026-07-08","org":{"ja":"東京都（都民向け金融セミナー公式サイト）","en":"Tokyo Metropolitan Government (financial seminar website)"},"sector":"government","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"サイト・管理画面・申込者データが消失。のちに復旧","en":"Website, admin panel and applicant data found missing; later restored"},"vector":null,"actor":null,"summary":{"ja":"委託先が運営する都民向け金融セミナーのサイトで攻撃の痕跡が見つかり、申込者情報が一時消失したが復元された。","en":"Attack traces were found on a contractor-run Tokyo financial seminar site. Applicant data temporarily vanished and was later restored."},"sources":[{"title":"都民向け金融セミナー公式サイトに攻撃の痕跡、申込者情報が一時消失するも復元完了","publisher":"ScanNetSecurity","date":"2026-07-24","url":"https://scan.netsecurity.ne.jp/article/2026/07/24/55773.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"東京都","en":"Tokyo Metropolitan Government"},"group":"access"},{"id":"0a255d8c3c","date":"2026-07-09","occurred":"2026-04-17","disclosed":"2026-07-09","org":{"ja":"福岡大学（委託先 株式会社ノストラム）","en":"Fukuoka University (contractor Nostrum Co., Ltd.)"},"sector":"education","type":"supply_chain","via_vendor":true,"records":33668,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"委託先サーバーが停止（2026年4月19日に発覚）","en":"Contractor server went down (found 2026-04-19)"},"vector":{"ja":"委託先サーバーに侵入され、ファイル暗号化とバックドア設置","en":"Contractor server breached; files encrypted and a backdoor installed"},"actor":null,"summary":{"ja":"就活筆記試験対策サイト「SMART SPI」の委託先サーバが侵害・暗号化され、学生最大33,668名の学籍番号・生年月日・成績等が漏えいした可能性がある。攻撃者はデータ公開を予告した。","en":"The server of the contractor running the SMART SPI test-prep site was breached and encrypted. Student IDs, birth dates and test results of up to 33,668 students may have leaked, and the attacker announced it would publish the data."},"sources":[{"title":"本学が委託する筆記試験対策サイトへの不正アクセスについて（報告とお詫び）","publisher":"福岡大学","date":"2026-07-09","url":"https://www.fukuoka-u.ac.jp/news/26/07/08175927.html"},{"title":"福岡大学の委託先ノストラムに不正アクセス、攻撃者のサイト上に窃取したデータを公開する旨の告知","publisher":"ScanNetSecurity","date":"2026-07-27","url":"https://scan.netsecurity.ne.jp/article/2026/07/27/55787.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"福岡大学","en":"Fukuoka University"},"group":"access"},{"id":"f2d7f6d839","date":"2026-07-09","occurred":"2026-07-02","disclosed":"2026-07-09","org":{"ja":"株式会社ネットワークジャパン（ネットワーク引越センター）","en":"Network Japan (Network Hikkoshi Center moving service)"},"sector":"services","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"顧客管理データベースを削除","en":"Customer management database deleted"},"vector":{"ja":"顧客管理システム（外部委託先と運用）","en":"Customer management system (operated with an outsourced provider)"},"actor":null,"summary":{"ja":"顧客管理システムのデータベースが不正アクセスで削除され、暗号資産を要求する文書が置かれた。2025年3月〜2026年5月の顧客情報が漏えいした可能性がある。","en":"Attackers deleted the customer-management database and left a note demanding cryptocurrency. Customer data from March 2025 to May 2026 may have leaked."},"sources":[{"title":"お客様情報に関するお知らせとお詫び","publisher":"ネットワークジャパン","date":"2026-07-09","url":"https://www.happiness-to-everyone.com/news/731/"},{"title":"ネットワークジャパンにランサムウェア攻撃、復旧と引き換えに暗号資産を要求する文書を設置","publisher":"ScanNetSecurity","date":"2026-07-28","url":"https://scan.netsecurity.ne.jp/article/2026/07/28/55796.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ネットワーク引越センター","en":"Network Hikkoshi Center"},"group":"ransomware"},{"id":"5b23eadb6f","date":"2026-07-10","occurred":"2026-07-09","disclosed":"2026-07-10","org":{"ja":"金子農機株式会社","en":"Kaneko Noki"},"sector":"manufacturing","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"7月9日未明にランサムウェアによるとみられる不正アクセスを検知し、一部サーバへの侵入と業務データへのアクセスを確認した。","en":"Suspected ransomware intrusion was detected early on 9 July. Some servers and stored business data were accessed."},"sources":[{"title":"金子農機にランサムウェア攻撃、サーバに保存していた各種業務データへの不正アクセスを確認","publisher":"ScanNetSecurity","date":"2026-08-03","url":"https://scan.netsecurity.ne.jp/article/2026/08/03/55845.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"金子農機","en":"Kaneko Noki"},"group":"ransomware"},{"id":"f98840bf0b","date":"2026-07-12","occurred":null,"disclosed":"2026-07-12","org":{"ja":"札幌国際大学","en":"Sapporo International University"},"sector":"education","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"7月13〜14日は全授業を休講。侵害されたアカウント（Outlook、OneDrive、Teams、LMS）を停止","en":"All classes cancelled 13–14 July; compromised accounts suspended (Outlook, OneDrive, Teams, LMS)"},"vector":{"ja":"フィッシングメールで学生・教職員の認証情報を窃取","en":"Phishing emails stole student and staff credentials"},"actor":null,"summary":{"ja":"学生・教職員がフィッシングでアカウント情報を盗まれ、大量の不審メール送信に悪用された。対応のため7月13・14日の全授業を休講した。","en":"Phishing stole student and staff credentials, and the accounts were used to send mass spam. All classes were cancelled on 13–14 July."},"sources":[{"title":"【学生の皆さんへ】不審メールに関する緊急対応について","publisher":"札幌国際大学","date":"2026-07-12","url":"https://www.siu.ac.jp/news/detail.html?news=1849"},{"title":"2日間全科目休講 ～ 札幌国際大学のアカウントがフィッシングメール被害","publisher":"ScanNetSecurity","date":"2026-07-17","url":"https://scan.netsecurity.ne.jp/article/2026/07/17/55730.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"札幌国際大学","en":"Sapporo International University"},"group":"other"},{"id":"f0f05c619b","date":"2026-07-13","occurred":"2026-07-11","disclosed":"2026-07-13","org":{"ja":"日本交通株式会社","en":"Nihon Kotsu Co., Ltd."},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"ハイヤーのWeb注文・予約、電話配車、一部社内システムが停止。顧客はGOアプリへ誘導。10月5日に一部復旧を告知","en":"Hire-car web order/reservation system, phone taxi dispatch and some internal systems stopped; customers sent to the GO app; partial restoration notice 5 October"},"vector":null,"actor":null,"summary":{"ja":"7月11日未明に社内システムへの不正アクセスとマルウェア感染が起き、システムを緊急遮断した。電話配車やハイヤー予約が停止し、8月の第4報で保有ファイルの一部流出を確認した。","en":"Japan's largest taxi operator suffered intrusion and malware infection early on 11 July and shut its systems down. Phone dispatch and hire-car booking stopped. In August it confirmed some files had leaked."},"sources":[{"title":"日本交通が不正アクセスでシステムを緊急遮断、タクシー配車やハイヤー予約等に一部影響","publisher":"ScanNetSecurity","date":"2026-07-15","url":"https://scan.netsecurity.ne.jp/article/2026/07/15/55706.html"},{"title":"Malware Hits Japan's Largest Taxi Company Nihon Kotsu, Services Temporarily Suspended","publisher":"Security Affairs","date":"2026-07-14","url":"https://securityaffairs.com/?p=195305"},{"title":"弊社システムへの不正アクセスによるシステム停止について（第3報）","publisher":"日本交通","date":"2026-07-22","url":"https://www.nihon-kotsu.co.jp/news/20260722-3343/"},{"title":"日本交通への不正アクセス、保有ファイルの一部が外部流出","publisher":"ScanNetSecurity","date":"2026-09-04","url":"https://scan.netsecurity.ne.jp/article/2026/09/04/56132.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日本交通","en":"Nihon Kotsu"},"group":"access"},{"id":"401012dfc5","date":"2026-07-13","occurred":null,"disclosed":"2026-07-13","org":{"ja":"八王子学園八王子中学校・高等学校","en":"Hachioji Gakuen Hachioji Junior & Senior High School"},"sector":"education","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"一部サーバーが被害。代表メールアドレスに連絡不可","en":"Some servers hit; representative email address unreachable"},"vector":null,"actor":null,"summary":{"ja":"一部サーバが第三者の不正アクセスとランサムウェアの被害を受け、警察・専門家と調査中。情報流出の有無は未確定。","en":"Some school servers were hit by unauthorized access and ransomware. The school is investigating with police and experts, and whether data leaked is undetermined."},"sources":[{"title":"本校を標的にしたサイバー攻撃につきまして","publisher":"八王子学園","date":"2026-07-13","url":"https://www.hachioji.ed.jp/information/urgent/4997/"},{"title":"八王子学園にランサムウェア攻撃","publisher":"ScanNetSecurity","date":"2026-07-29","url":"https://scan.netsecurity.ne.jp/article/2026/07/29/55806.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"八王子学園八王子中学校・高等学校","en":"Hachioji Gakuen Hachioji Junior & Senior High School"},"group":"ransomware"},{"id":"fe4fd05747","date":"2026-07-13","occurred":null,"disclosed":"2026-07-13","org":{"ja":"株式会社ニチレイ（ニチレイロジグループ・ニチレイフーズ）","en":"Nichirei Corporation (Nichirei Logi Group, Nichirei Foods)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":53866,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"7月13日に低温倉庫業務と冷凍食品の出荷を停止。17日から段階再開、24日に全拠点通常化。KFC、くら寿司、イオン、生協、ヨシケイ、学校給食で品不足","en":"Cold-warehouse operations and frozen-food shipping stopped on 13 July; staged restart from 17 July; all sites normal 24 July. Knock-on shortages at KFC, Kura Sushi, Aeon, co-ops, Yoshikei and school lunch programmes."},"vector":null,"actor":"RansomHouse (claimed on leak site; unverified, Nichirei has not confirmed)","summary":{"ja":"サーバへのサイバー攻撃でグループシステムを停止し、冷蔵倉庫の入出庫と冷凍食品出荷が止まり、外食・小売・生協・学校給食に影響が広がった。9月に従業員等43,709件を含む計53,866件の漏えいを確認した。","en":"A cyberattack on servers forced a group-wide system shutdown and halted cold-storage logistics and frozen-food shipping. Restaurants, retailers, co-ops and school lunches were hit. In September it confirmed 53,866 records leaked, including 43,709 employee-related ones."},"sources":[{"title":"当社グループでのシステム障害発生について（第1報）","publisher":"ニチレイ","date":"2026-07-13","url":"https://www.nichirei.co.jp/news/2026/512.html"},{"title":"当社グループでのシステム障害発生について（第2報）","publisher":"ニチレイ","date":"2026-07-15","url":"https://www.nichirei.co.jp/news/2026/513.html"},{"title":"当社グループでのシステム障害発生について（第5報）","publisher":"ニチレイ","date":"2026-07-24","url":"https://www.nichirei.co.jp/news/2026/517.html"},{"title":"当社グループでのシステム障害発生について（第7報）","publisher":"ニチレイ","date":"2026-09-18","url":"https://www.nichirei.co.jp/news/2026/524.html"},{"title":"サイバー攻撃によるニチレイグループのシステム障害についてまとめてみた","publisher":"piyolog","date":"2026-07-16","url":"https://piyolog.hatenadiary.jp/entry/2026/07/16/022032"},{"title":"(RansomHouse claims Nichirei attack)","publisher":"ITmedia NEWS","date":"2026-07-22","url":"https://www.itmedia.co.jp/news/articles/2607/22/news064.html"},{"title":"ニチレイロジグループへの不正アクセスに起因するシステム障害、KFC店舗への食材納品に影響","publisher":"ScanNetSecurity","date":"2026-07-30","url":"https://scan.netsecurity.ne.jp/article/2026/07/30/55816.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ニチレイ","en":"Nichirei"},"group":"access"},{"id":"4622a0e886","date":"2026-07-14","occurred":"2026-06-24","disclosed":"2026-07-14","org":{"ja":"株式会社メディア4u（ファブリカHD子会社）","en":"Media4u (Fabrica Holdings subsidiary)"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":22928,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"SMS配信システムの管理画面に、顧客1社のアカウント経由で不正アクセス","en":"Unauthorized access to the SMS delivery system's admin console via one client account"},"actor":null,"summary":{"ja":"SMS配信システムの管理コンソールに不正アクセスがあり、95,412件のアカウント管理リストが流出し、280通の不正SMSが送信された。OEM提供先にも影響が及んだ。","en":"Attackers got into the admin console of an SMS delivery platform. They took a 95,412-record account-management list and sent 280 unauthorized SMS. OEM partners were also affected."},"sources":[{"title":"SMS配信システムへの不正アクセスに関するお知らせとお詫び","publisher":"メディア4u","date":"2026-07-14","url":"https://www.media4u.co.jp/news/3351"},{"title":"メディア4uのSMS送信システムにサイバー攻撃、個人情報漏えいと不正なSMS送信を確認","publisher":"ScanNetSecurity","date":"2026-07-28","url":"https://scan.netsecurity.ne.jp/article/2026/07/28/55798.html"},{"title":"(Fabrica/Media4u SMS unauthorized access)","publisher":"rocket-boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/security-measures-lab/fabrica-media4u-sms-unauthorized-access/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"メディア4u","en":"Media4u"},"group":"access"},{"id":"f0f4473f62","date":"2026-07-14","occurred":"2026-07-08","disclosed":"2026-07-14","org":{"ja":"株式会社ファイブフォックス","en":"Five Foxes Co., Ltd. (COMME CA group apparel)"},"sector":"retail_food","type":"ransomware","via_vendor":false,"records":73185,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"本社のサーバー・インターネット・メールを停止。店舗とオンラインショップは営業継続","en":"Head-office servers, internet and email shut down; stores and online shop kept running"},"vector":null,"actor":null,"summary":{"ja":"定期調査で本社サーバの一部がランサムウェアに感染した可能性を確認した。9月の続報で顧客・従業員の最大73,185件の漏えい可能性を公表した。","en":"A routine security check found that some head-office servers may be infected with ransomware. A September update put possible exposure at up to 73,185 customer and employee records."},"sources":[{"title":"ランサムウェア感染の可能性に関するお知らせとお詫び","publisher":"ファイブフォックス","date":"2026-07-14","url":"https://www.fivefoxes.co.jp/2026/07/post-20.html"},{"title":"ファイブフォックスのサーバがランサムウェア感染の可能性、通常のセキュリティ調査過程で発覚","publisher":"ScanNetSecurity","date":"2026-08-04","url":"https://scan.netsecurity.ne.jp/article/2026/08/04/55857.html"},{"title":"ファイブフォックス、不正アクセスで個人情報 最大7万3,185件 漏洩の可能性","publisher":"rocket-boys","url":"https://rocket-boys.co.jp/?p=40669"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ファイブフォックス","en":"Five Foxes"},"group":"ransomware"},{"id":"1ee740cb7d","date":"2026-07-16","occurred":"2026-07-01","disclosed":"2026-07-16","org":{"ja":"日産化学株式会社","en":"Nissan Chemical Corporation"},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"7月1日にシステムで不審な活動を検知し、第三者による不正アクセスの可能性を確認した。顧客・取引先への影響は現時点で未確認。","en":"Suspicious activity was detected on 1 July, and possible third-party unauthorized access was confirmed. No impact on customers or partners had been confirmed."},"sources":[{"title":"当社システムに対する不正アクセスについて","publisher":"日産化学","date":"2026-07-16","url":"https://www.nissanchem.co.jp/news_release/news/n2026_07_16.pdf"},{"title":"日産化学への不正アクセス、システムで不審な活動を検知し発覚","publisher":"ScanNetSecurity","date":"2026-08-03","url":"https://scan.netsecurity.ne.jp/article/2026/08/03/55847.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日産化学","en":"Nissan Chemical"},"group":"access"},{"id":"228d314c1e","date":"2026-07-17","occurred":"2026-07-06","disclosed":"2026-07-17","org":{"ja":"アイダエンジニアリング株式会社","en":"Aida Engineering"},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"アジア拠点の決算遅れで、第1四半期決算を8月7日から8月下旬へ延期。事業は継続","en":"Q1 results moved from 7 August to late August because of delayed closing at an Asian site; operations continued"},"vector":null,"actor":null,"summary":{"ja":"アジア拠点のシステムで異常を検知し不正アクセスの可能性が判明した。決算手続が遅れ、第1四半期決算発表を延期した。","en":"Abnormal behaviour at an Asian site's system pointed to possible intrusion. Closing procedures were delayed and the Q1 earnings release was postponed."},"sources":[{"title":"当社システムへの不正アクセスの発生及び2027年3月期第1四半期決算発表の延期に関するお知らせ","publisher":"アイダエンジニアリング","date":"2026-07-17","url":"https://www.aida.co.jp/news/77898e7008265ee89562f5843f23724f65d0e7f4.pdf"},{"title":"アイダエンジニアリングに不正アクセス、アジア拠点における決算手続に遅延","publisher":"ScanNetSecurity","date":"2026-08-04","url":"https://scan.netsecurity.ne.jp/article/2026/08/04/55858.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"アイダエンジニアリング","en":"Aida Engineering"},"group":"access"},{"id":"617614c155","date":"2026-07-18","occurred":"2026-07-15","disclosed":"2026-07-18","org":{"ja":"佐川急便株式会社（スマートクラブ）","en":"Sagawa Express (Smart Club)"},"sector":"logistics_transport","type":"misconfiguration","via_vendor":false,"records":70000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"スマートクラブのサービス不具合（復旧済み）","en":"Smart Club service malfunction (restored)"},"vector":{"ja":"別のシステム障害の復旧中に、配達通知メールの設定を誤った","en":"Settings error in delivery-notice emails made during recovery from a separate system fault"},"actor":null,"summary":{"ja":"配達予定通知メールに別の会員の氏名・メールアドレス・問い合わせ番号が表示され、約7万人に影響した可能性がある。不正アクセスやサイバー攻撃ではないとしている。","en":"Delivery-notice emails showed other members' names, email addresses and tracking numbers, possibly affecting about 70,000 people. Sagawa says it was not a cyberattack."},"sources":[{"title":"佐川急便「スマートクラブ」における会員情報の誤表示についてまとめてみた","publisher":"piyolog","date":"2026-07-18","url":"https://piyolog.hatenadiary.jp/entry/2026/07/18/191222"},{"title":"(Sagawa Smart Club misdisplay)","publisher":"ITmedia NEWS","date":"2026-07-18","url":"https://www.itmedia.co.jp/news/articles/2607/18/news021.html"}],"confidence":"high","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"攻撃による漏えいの件数ではない（設定ミス・人為的ミス・件数の集計値）ため合計に含めない","en":"not added to totals: not records leaked by an attack (misconfiguration, human error, or a count of cases)"},"short":{"ja":"佐川急便","en":"Sagawa Express"},"group":"access"},{"id":"9733b7006d","date":"2026-07-22","occurred":"2026-07-15","disclosed":"2026-07-22","org":{"ja":"扶桑電通株式会社","en":"Fuso Dentsu"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"外部との共有に使うクラウドストレージの共有フォルダ","en":"Cloud-storage shared folder used with external parties"},"actor":null,"summary":{"ja":"社外関係者との情報共有用クラウドストレージの共有フォルダに不正アクセスがあり、委託元の企業も影響を公表した。","en":"A cloud-storage folder Fuso Dentsu shared with outside parties was accessed without authorization, and client companies later disclosed impact."},"sources":[{"title":"扶桑電通が社外関係者との情報共有に利用していた共有フォルダに不正アクセス","publisher":"ScanNetSecurity","date":"2026-08-12","url":"https://scan.netsecurity.ne.jp/article/2026/08/12/55909.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"扶桑電通","en":"Fuso Dentsu"},"group":"access"},{"id":"6df1497c5f","date":"2026-07-23","occurred":null,"disclosed":"2026-07-23","org":{"ja":"株式会社OCS（ANAグループ）","en":"OCS Co., Ltd. (ANA Group)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"「OCS FAMILY LINK SERVICE」を停止。システムと関連ネットワークを緊急遮断","en":"OCS FAMILY LINK SERVICE suspended; system and related networks emergency-shut"},"vector":{"ja":"外部の第三者によるアクセス","en":"External third-party access"},"actor":null,"summary":{"ja":"「OCS FAMILY LINK SERVICE」を障害で停止し、翌日の第2報で外部からの不正アクセスにより一部の個人情報・データが流出した可能性を公表した。","en":"OCS suspended its FAMILY LINK SERVICE for a 'malfunction'. The next day it said external unauthorized access may have leaked some personal data."},"sources":[{"title":"「OCS FAMILY LINK SERVICE」システム不具合に伴うサービス一時停止について（第1報）","publisher":"OCS","date":"2026-07-23","url":"https://www.ocs.co.jp/5279052"},{"title":"同（第2報）","publisher":"OCS","date":"2026-07-24","url":"https://www.ocs.co.jp/5282218"},{"title":"ANAグループ 株式会社OCSの「OCS FAMILY LINK SERVICE」に不正アクセス、一部の個人情報・データが流出した可能性","publisher":"ScanNetSecurity","date":"2026-08-05","url":"https://scan.netsecurity.ne.jp/article/2026/08/05/55870.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"OCS","en":"OCS"},"group":"access"},{"id":"4ab3ea289f","date":"2026-07-24","occurred":"2026-06-15","disclosed":"2026-07-24","org":{"ja":"シミックヘルスケア・インスティテュート株式会社","en":"CMIC Healthcare Institute"},"sector":"healthcare","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"システムの一般公開されたWeb領域にファイルが置かれていた","en":"Files placed in a publicly accessible web area of the system"},"actor":null,"summary":{"ja":"旭化成セラピューティクスから受託した関節リウマチ治療薬ケブザラの患者支援プログラム「RAコネクト」のシステムに不正アクセスがあり、個人情報の一部が漏えいした。","en":"Someone accessed the system behind RA Connect, a Kevzara patient-support programme CMIC runs for Asahi Kasei Therapeutics, without authorization, and some personal data leaked."},"sources":[{"title":"シミックヘルスケア・インスティテュートが運営を受託している患者支援サービスに不正アクセス","publisher":"ScanNetSecurity","date":"2026-08-10","url":"https://scan.netsecurity.ne.jp/article/2026/08/10/55901.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"シミックヘルスケア・インスティテュート","en":"CMIC Healthcare Institute"},"group":"access"},{"id":"b646045395","date":"2026-07-24","occurred":"2026-07-15","disclosed":"2026-07-24","org":{"ja":"株式会社ムラウチドットコム","en":"Murauchi.com"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":7716811,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"7月15日未明に社内システム障害","en":"Internal system failure early on 15 July"},"vector":{"ja":"自社管理のWebシステムの一部の脆弱性（第2報）","en":"Vulnerability in part of the company-managed web system (per 2nd report)"},"actor":null,"summary":{"ja":"7月15日のシステム障害の復旧中に不正アクセスの痕跡が見つかった。9月の第二報で氏名・住所・電話番号等7,716,811件の持ち出しを確認した。","en":"Signs of intrusion were found while recovering from a 15 July system failure. A September report confirmed 7,716,811 records (names, addresses, phone numbers and more) were taken."},"sources":[{"title":"ムラウチドットコムに不正アクセス、7,716,811件の個人情報が漏えい","publisher":"ScanNetSecurity","date":"2026-10-06","url":"https://scan.netsecurity.ne.jp/article/2026/10/06/56391.html"},{"title":"ムラウチドットコム、771万6,811件の個人情報漏洩を確認","publisher":"rocket-boys","url":"https://rocket-boys.co.jp/security-measures-lab/murauchi-7716811-customer-data-report/"},{"title":"(Murauchi.com breach)","publisher":"innovatopia","date":"2026-10-09","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118732/"},{"title":"セキュリティインシデント 2026","publisher":"westeria","url":"https://westeria.jp/security-incidents/2026/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ムラウチドットコム","en":"Murauchi.com"},"group":"access"},{"id":"f368e8f3e8","date":"2026-07-26","occurred":"2026-07-24","disclosed":"2026-07-26","org":{"ja":"NTTスマートコネクト株式会社（スマイルサーバ）","en":"NTT SmartConnect (Smile Server rental hosting)"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"7月24日からjm9/jm10.etius.jpの全サービスを停止。顧客は代替サーバーへ移行。復旧に長期間の見込み","en":"All services on jm9/jm10.etius.jp suspended from 24 July; customers moved to substitute servers; long recovery expected"},"vector":null,"actor":null,"summary":{"ja":"レンタルサーバの2台で保守作業が長引き、調査で外部からの不正アクセスの痕跡を確認して全サービスを停止した。顧客情報の流出は現時点で未確認。","en":"Maintenance on two shared-hosting servers ran long, and the investigation found intrusion traces, so all services on them were suspended. No customer data leak confirmed so far."},"sources":[{"title":"jm9およびjm10.etius.jpサーバでの全サービスの一時停止について","publisher":"スマイルサーバ（NTTスマートコネクト）","date":"2026-07-24","url":"https://support.smileserver.ne.jp/ver5/72trb/2026/07/2026072402.html"},{"title":"「スマイルサーバ」で不正アクセスの痕跡、復旧までに長期間を要する見込み","publisher":"ScanNetSecurity","date":"2026-08-12","url":"https://scan.netsecurity.ne.jp/article/2026/08/12/55910.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"NTTスマートコネクト","en":"NTT SmartConnect"},"group":"access"},{"id":"33b63934c0","date":"2026-07-29","occurred":"2025-12-09","disclosed":"2026-07-29","org":{"ja":"株式会社シー・コネクト（インク革命）","en":"C-Connect Inc. (Ink Kakumei online shop)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":24166,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"2025年12月10日にサイトのカード決済を停止","en":"Card payments on the site stopped 2025-12-10"},"vector":{"ja":"サイトの一部の脆弱性を突かれ、決済アプリを改ざん","en":"Vulnerability in part of the site system; payment application tampered with"},"actor":null,"summary":{"ja":"インク通販サイトの決済アプリが改ざんされ、24,166名分のカード情報が漏えいした可能性がある。カード会社からの連絡で発覚した。","en":"Attackers tampered with the payment application on an ink-cartridge e-commerce site, possibly exposing card data for 24,166 customers. Card companies alerted the operator."},"sources":[{"title":"「インク革命」に不正アクセス、24,166名のカード情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-08-18","url":"https://scan.netsecurity.ne.jp/article/2026/08/18/55949.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"シー・コネクト","en":"C-Connect"},"group":"access"},{"id":"0516e21bb7","date":"2026-07-30","occurred":null,"disclosed":"2026-07-30","org":{"ja":"楽天ドライブ（楽天モバイル）","en":"Rakuten Drive (Rakuten Mobile)"},"sector":"it_cloud","type":"other","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"7月31日12:00から8月4日15:00までサイトを休止","en":"Website paused 31 July 12:00 to 4 August 15:00"},"vector":{"ja":"不明。プッシュ通知の送信方法は非公表","en":"Unknown; how the push notifications were sent has not been disclosed"},"actor":null,"summary":{"ja":"楽天ドライブのアプリから「HACKED」「支払い拒否」等の不審なプッシュ通知が配信され、偽Googleログインやビットコイン要求に誘導された。保存データへの不正アクセスは確認されていない。","en":"Rakuten Drive app users got fake push notifications ('HACKED', 'payment declined') leading to a fake Google login page or bitcoin demands. Rakuten found no unauthorized access to stored data."},"sources":[{"title":"Rakuten Driveで発生した不審な通知についてまとめてみた","publisher":"piyolog","date":"2026-07-31","url":"https://piyolog.hatenadiary.jp/entry/2026/07/31/171928"},{"title":"（更新）【重要】楽天ドライブからの不審な通知を開かないでください","publisher":"楽天モバイル","date":"2026-07-31","url":"https://network.mobile.rakuten.co.jp/information/news/other/3809/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"楽天ドライブ","en":"Rakuten Drive"},"group":"other"},{"id":"e4fb7f7e3a","date":"2026-07-31","occurred":"2026-07-27","disclosed":"2026-07-31","org":{"ja":"株式会社EPARKリラク&エステ（PeakManager）","en":"EPARK Relax & Esthe (PeakManager salon booking/CRM platform)"},"sector":"services","type":"supply_chain","via_vendor":true,"records":33000000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"データベースの顧客データが削除（復旧済み）。データベースをオフラインにしてバックアップに切替","en":"Customer data in the database deleted (restored); database taken offline and switched to backup"},"vector":{"ja":"データベース接続用アカウントの悪用","en":"Misused database connection account"},"actor":null,"summary":{"ja":"サロン向け予約・顧客管理基盤「PeakManager」の一部DBに不正アクセスがあり顧客情報が削除された。約3,300万レコード（人数ではない）が漏えいした可能性がある。","en":"Part of the database behind PeakManager, a salon booking/CRM platform, was breached and customer data deleted. About 33 million records (not people) may have leaked."},"sources":[{"title":"不正アクセスによる個人情報漏えいの可能性に関するお知らせ（第一報）","publisher":"EPARKリラク&エステ","date":"2026-07-31","url":"https://www.epark-relax.co.jp/news/225"},{"title":"EPARKリラク&エステの予約管理・顧客管理プラットフォーム「PeakManager」に不正アクセス、個人情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-08-21","url":"https://scan.netsecurity.ne.jp/article/2026/08/21/55989.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"EPARKリラク&エステ","en":"EPARK Relax & Esthe"},"group":"access"},{"id":"b6a46de82d","date":"2026-08-01","occurred":"2026-05-21","disclosed":"2026-08-01","org":{"ja":"株式会社Eストアー（ショップサーブ）","en":"E-Store Inc. (ShopServe EC platform)"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":8853839,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"ショップサーブのサーバーで不正プログラムが動き、購入者情報を外部へ送信。侵入経路は非公表","en":"Unauthorized program run on the ShopServe server sent purchaser data outside; entry route not disclosed"},"actor":null,"summary":{"ja":"EC構築サービス「ショップサーブ」のサーバで不正プログラムが実行され、多数の出店店舗の購入者情報が外部に送信された。カード情報の一部や店舗の管理画面・FTPの認証情報も対象となった。","en":"A malicious program on the ShopServe server sent purchaser data from many merchant stores outside. Partial card data and store admin and FTP credentials were also affected."},"sources":[{"title":"不正アクセスによる個人情報漏えいに関するお知らせ（第2報）","publisher":"Eストアー","date":"2026-08-02","url":"https://estore.jp/press/20260802/"},{"title":"Eストアーのショップサーブへの不正アクセスについてまとめてみた","publisher":"piyolog","date":"2026-08-12","url":"https://piyolog.hatenadiary.jp/entry/2026/08/12/072307"},{"title":"今日もどこかで情報漏えい 第52回「2026年8月の情報漏えい」","publisher":"ScanNetSecurity","date":"2026-09-25","url":"https://scan.netsecurity.ne.jp/article/2026/09/25/56306.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ショップサーブ（Eストアー）","en":"ShopServe (E-Store)"},"group":"access"},{"id":"b34aa9989f","date":"2026-08-03","occurred":"2026-07-27","disclosed":"2026-08-03","org":{"ja":"株式会社講談社","en":"Kodansha Ltd."},"sector":"media_entertainment","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"取引先を装うフィッシングメールで、従業員が偽ログイン画面に認証情報を入力","en":"Phishing email posing as a business partner led an employee to enter credentials on a fake login page"},"actor":null,"summary":{"ja":"社員が取引先を装うフィッシングメールで認証情報を入力し、メールボックスが乗っ取られて連絡先が窃取された。その社員を装ったフィッシングメールが送信された。","en":"An employee typed credentials into a phishing page posing as a partner. The attacker took over the mailbox, stole contacts and sent phishing in the employee's name."},"sources":[{"title":"連絡先情報が窃取されフィッシングメール大量送信 ～ 取引先を偽装したフィッシングメールのリンクを講談社社員がクリック","publisher":"ScanNetSecurity","date":"2026-08-17","url":"https://scan.netsecurity.ne.jp/article/2026/08/17/55940.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"講談社","en":"Kodansha"},"group":"other"},{"id":"67372cfd09","date":"2026-08-03","occurred":"2026-08-01","disclosed":"2026-08-03","org":{"ja":"株式会社大仙","en":"Daisen Co., Ltd."},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"社内システムをすべて遮断。受注と出荷に影響","en":"All internal systems cut off; order intake and shipping affected"},"vector":{"ja":"外部からの侵入とマルウェア感染。経路は非公表","en":"External intrusion with malware infection; route not disclosed"},"actor":null,"summary":{"ja":"外部からの不正アクセスで社内システムがマルウェアに感染し、全システムを遮断したため受注・出荷業務に影響が出た。","en":"An intrusion infected internal systems with malware. The company shut down all systems, which disrupted orders and shipping."},"sources":[{"title":"弊社システムへの不正アクセスによるシステム停止に関するお詫びとご報告","publisher":"大仙","date":"2026-08-03","url":"https://www.daisen.co.jp/news/000229.html"},{"title":"大仙のシステムに不正アクセス、社内全システム遮断し受注出荷業務に影響","publisher":"ScanNetSecurity","date":"2026-08-31","url":"https://scan.netsecurity.ne.jp/article/2026/08/31/56077.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"大仙","en":"Daisen"},"group":"access"},{"id":"d4e61381df","date":"2026-08-04","occurred":"2026-07-29","disclosed":"2026-08-04","org":{"ja":"中部電力株式会社","en":"Chubu Electric Power Co., Inc."},"sector":"infrastructure_energy","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"なし（システム障害・電力供給への影響なし）","en":"None (no system failure or effect on power supply)"},"vector":{"ja":"一部システムの正規の認証情報を悪用。入手方法は非公表","en":"Misuse of valid credentials for some systems; how they were obtained is not disclosed"},"actor":null,"summary":{"ja":"一部システムの資格情報が不正利用され、役職員のメールの一部とグループの連絡先情報が閲覧された可能性がある。電力供給への影響はない。","en":"Stolen credentials for some systems were used to possibly view staff emails and group contact data. Power supply was not affected."},"sources":[{"title":"不正アクセスによる情報漏えいの可能性について","publisher":"中部電力","date":"2026-08-04","url":"https://www.chuden.co.jp/publicity/press/1218169_3273.html"},{"title":"中部電力の不正アクセス (INTERNET Watch article 2130524)","publisher":"INTERNET Watch (Impress)","date":"2026-08-04","url":"https://internet.watch.impress.co.jp/docs/news/2130524.html"},{"title":"中部電力の一部のシステムに不正アクセス、第三者機関からの情報提供で発覚","publisher":"ScanNetSecurity","date":"2026-08-27","url":"https://scan.netsecurity.ne.jp/article/2026/08/27/56044.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"中部電力","en":"Chubu Electric Power Co."},"group":"other"},{"id":"0203212d1d","date":"2026-08-04","occurred":null,"disclosed":"2026-08-04","org":{"ja":"株式会社イノベーション","en":"Innovation Inc."},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":62691,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"プログラム設定ファイルに書かれたGitHubの認証情報を入手され悪用。リポジトリに個人情報が保存されていた","en":"GitHub access credential written into a program config file was obtained and misused; personal data had been stored in repositories"},"actor":null,"summary":{"ja":"設定ファイルに直書きされていたGitHubの認証情報が第三者に悪用され、リポジトリ内に保存されていた顧客の個人情報が漏えいした。","en":"A GitHub credential hard-coded in a config file was misused. Customer personal data that had been stored in repositories leaked."},"sources":[{"title":"GitHubへの不正アクセスに関する詳細調査の完了およびセキュリティ対策強化のお知らせ（確定報）","publisher":"イノベーション","date":"2026-08-07","url":"https://www.innovation.co.jp/2026/08/github%e3%81%b8%e3%81%ae%e4%b8%8d%e6%ad%a3%e3%82%a2%e3%82%af%e3%82%bb%e3%82%b9%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e8%a9%b3%e7%b4%b0%e8%aa%bf%e6%9f%bb%e3%81%ae%e5%ae%8c%e4%ba%86%e3%81%8a%e3%82%88/"},{"title":"イノベーションが利用する GitHub への不正アクセス、62,691名分の顧客情報が漏えい","publisher":"ScanNetSecurity","date":"2026-08-20","url":"https://scan.netsecurity.ne.jp/article/2026/08/20/55975.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"イノベーション","en":"Innovation"},"group":"access"},{"id":"afd375eb39","date":"2026-08-05","occurred":"2026-08-04","disclosed":"2026-08-05","org":{"ja":"一般社団法人共同通信社","en":"Kyodo News"},"sector":"media_entertainment","type":"account_takeover","via_vendor":false,"records":6000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"確認されず（ニュース配信・編集システムは影響なし）","en":"None confirmed (news distribution and editing systems unaffected)"},"vector":{"ja":"一部の職員アカウントを第三者が悪用。手口は非公表","en":"Some staff accounts misused by a third party; method not disclosed"},"actor":null,"summary":{"ja":"一部職員のアカウントが不正使用され、メールや保存ファイルが閲覧された可能性がある。職員や加盟社・取引先の連絡先約6千件が対象。","en":"Some staff accounts were misused, and their mail and stored files may have been viewed. About 6,000 contact records of staff, member outlets and partners are involved."},"sources":[{"title":"共同通信の不正アクセス (INTERNET Watch article 2130852)","publisher":"INTERNET Watch (Impress)","date":"2026-08-05","url":"https://internet.watch.impress.co.jp/docs/news/2130852.html"},{"title":"共同通信に不正アクセス 連絡先6千件流出か","publisher":"熊本日日新聞","date":"2026-08-05","url":"https://kumanichi.com/articles/2022249"},{"title":"共同通信社の職員アカウントが第三者に不正利用された可能性、外部から情報提供があり発覚","publisher":"ScanNetSecurity","date":"2026-08-24","url":"https://scan.netsecurity.ne.jp/article/2026/08/24/56002.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"共同通信社","en":"Kyodo News"},"group":"other"},{"id":"592cf7d037","date":"2026-08-06","occurred":"2026-08-05","disclosed":"2026-08-06","org":{"ja":"株式会社シーイーシー","en":"CEC Co., Ltd."},"sector":"it_cloud","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"東京第2データセンターのサービス障害。第1報では復旧済みと説明","en":"Failure in the Tokyo No.2 Data Center service; the first report said service was already restored"},"vector":{"ja":"非公表","en":"Not disclosed"},"actor":null,"summary":{"ja":"東京第二データセンターのサービスで不正アクセスに起因する障害が発生し、ランサムウェア攻撃と確認された。攻撃領域は顧客預かりのシステム・データとは別としている。","en":"A failure at CEC's Tokyo No.2 data center service was confirmed to be ransomware. CEC says the attacked area was separate from customer systems and data."},"sources":[{"title":"当社データセンターサービスの障害発生のお知らせ（第1報）","publisher":"シーイーシー","date":"2026-08-06","url":"https://www.cec-ltd.co.jp/news/2026/7371.html"},{"title":"当社データセンターサービスの障害発生のお知らせ（続報）","publisher":"シーイーシー","date":"2026-08-07","url":"https://www.cec-ltd.co.jp/news/2026/7372.html"},{"title":"シーイーシーのデータセンターにランサムウェア攻撃、障害が発生","publisher":"ScanNetSecurity","date":"2026-08-20","url":"https://scan.netsecurity.ne.jp/article/2026/08/20/55973.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"シーイーシー","en":"CEC"},"group":"ransomware"},{"id":"968518fb39","date":"2026-08-06","occurred":null,"disclosed":"2026-08-06","org":{"ja":"株式会社アンビションDXホールディングス","en":"Ambition DX Holdings Co., Ltd."},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"ファイルサーバーにアクセス不能。新ネットワークへ移行し、8月28日までに全システム復旧と説明","en":"File-server access failure; company moved to a new network and said all systems were restored by Aug 28"},"vector":{"ja":"ファイルサーバーへの不正アクセス。手口は会社が非公表","en":"Unauthorized access to a file server; method withheld by the company"},"actor":"Settra (leak-site claim reported by Rocket Boys; not confirmed by the company)","summary":{"ja":"ファイルサーバへの第三者の不正アクセスが判明し、ログの消失も確認された。第3報で一部情報資産の漏えいを確認した。","en":"A third party broke into the company's file server and logs were found deleted. The third report confirmed that some information assets leaked."},"sources":[{"title":"当社サーバーへの不正アクセスによる情報漏えいの確認および調査状況について（第3報）","publisher":"アンビションDXホールディングス (TDnet)","date":"2026-08-28","url":"https://ssl4.eir-parts.net/doc/3300/tdnet/2879170/00.pdf"},{"title":"アンビションDXホールディングスに不正アクセス、ログの消失を確認","publisher":"ScanNetSecurity","date":"2026-08-31","url":"https://scan.netsecurity.ne.jp/article/2026/08/31/56079.html"},{"title":"Ambition DX 437GB leak claim article","publisher":"Rocket Boys セキュリティ対策Lab","date":"2026-08-31","url":"https://rocket-boys.co.jp/security-measures-lab/ambition-dx-cyberattack-437gb-leak/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"アンビションDXホールディングス","en":"Ambition DX Holdings"},"group":"access"},{"id":"ce2896001d","date":"2026-08-07","occurred":"2026-07-28","disclosed":"2026-08-07","org":{"ja":"国立研究開発法人科学技術振興機構（JST）","en":"Japan Science and Technology Agency (JST)"},"sector":"government","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"非公表（職員のメールボックスへ第三者がアクセス）","en":"Not disclosed (third-party access to staff mailboxes)"},"actor":null,"summary":{"ja":"第三者の不正アクセスにより、一部役職員のメールボックス内のメールが外部に漏えいした可能性がある。外部機関からの情報提供で発覚した。","en":"An outside party may have taken emails from some JST officers' and staff mailboxes. JST found out after an outside organisation alerted it."},"sources":[{"title":"不正アクセスによる情報漏えいの可能性に関するお詫びとお知らせ","publisher":"JST","date":"2026-08-07","url":"https://www.jst.go.jp/osirase/2026/20260807-2.html"},{"title":"国立研究開発法人科学技術振興機構（JST）に不正アクセス、外部機関からの情報提供で発覚","publisher":"ScanNetSecurity","date":"2026-08-31","url":"https://scan.netsecurity.ne.jp/article/2026/08/31/56080.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"国立研究開発法人科学技術振興機構","en":"Japan Science and Technology Agency"},"group":"access"},{"id":"f0a966d155","date":"2026-08-10","occurred":"2026-08-09","disclosed":"2026-08-10","org":{"ja":"REXT Holdings株式会社（子会社REXT株式会社）","en":"REXT Holdings Co., Ltd. (subsidiary REXT Co., Ltd.)"},"sector":"retail_food","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"WonderGOO、新星堂など5ブランドの一部店舗が臨時休業（8月16日までに全店再開）。一部の決済方法とサービスを制限","en":"Some WonderGOO, WonderREX, 新星堂, HAPiNS and JEANS MATE stores closed temporarily (all reopened by Aug 16); some payment methods and services restricted"},"vector":{"ja":"非公表","en":"Not disclosed"},"actor":"RansomHouse (leak-site listing reported by Rocket Boys on 2026-09-01; not confirmed by REXT)","summary":{"ja":"子会社の社内ネットワークがランサムウェアによる不正アクセスを受け、複数ブランドの店舗で休業や決済・サービス制限が発生した。","en":"Ransomware hit a subsidiary's internal network, forcing temporary store closures and payment and service limits across several retail brands."},"sources":[{"title":"当社ネットワークへの不正アクセスによるシステム障害および一部店舗の営業変更について（第2報）","publisher":"REXT Holdings","date":"2026-08-14","url":"https://www.rext.jp/ir/attachment/?id=83&field=0&inline=1"},{"title":"REXTにランサムウェア攻撃、WonderGOOや新星堂などの一部店舗に影響","publisher":"ScanNetSecurity","date":"2026-08-18","url":"https://scan.netsecurity.ne.jp/article/2026/08/18/55952.html"},{"title":"REXT Holdings RansomHouse claim","publisher":"Rocket Boys セキュリティ対策Lab","date":"2026-09-02","url":"https://rocket-boys.co.jp/security-measures-lab/rext-holdings-ransomhouse-claim/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"REXT","en":"REXT"},"group":"ransomware"},{"id":"761c38fab2","date":"2026-08-12","occurred":"2026-08-05","disclosed":"2026-08-12","org":{"ja":"ホワイトエッセンス","en":"White Essence (dental whitening chain)"},"sector":"healthcare","type":"unauthorized_access","via_vendor":false,"records":1050000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"8月12日の発表後、システムを一時停止","en":"System temporarily suspended after 12 Aug announcement"},"vector":{"ja":"予約サイトのプログラムの脆弱性を突かれ、基幹システムへ侵入","en":"Vulnerability in reservation-site program used to move into core system"},"actor":null,"summary":{"ja":"予約サイトのプログラムの脆弱性を突かれて基幹システムまで侵入され、約105万アカウントの氏名・住所・連絡先などが流出した。10月5日に続報を出した。","en":"Attackers exploited a reservation-site program flaw to reach the core system; about 1.05M accounts (name, address, contact details, encrypted login credentials) leaked. A follow-up was issued on 5 October."},"sources":[{"title":"【解説】焼肉きんぐ・大和証券など不正アクセス11件、10月2〜5日の個人情報漏えいを整理","publisher":"innovaTopia","date":"2026-10-06","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118602/"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"ホワイトエッセンス","en":"White Essence"},"group":"access"},{"id":"e2de28f580","date":"2026-08-13","occurred":"2026-08-10","disclosed":"2026-08-13","org":{"ja":"赤武エンジニアリング","en":"Akatake Engineering"},"sector":"manufacturing","type":"ransomware","via_vendor":false,"records":11712,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"サーバーのファイルが暗号化。全サーバー・端末を隔離。ファイルサーバーはバックアップから復旧","en":"Server files encrypted; all servers/terminals isolated; file server restored from backups"},"vector":{"ja":"管理者権限を奪取された（手口は不明）","en":"Attacker obtained administrator privileges (method unknown)"},"actor":null,"summary":{"ja":"社内サーバーがランサムウェアに感染し、従業員125件と取引先担当者1万1587件の情報が漏えいしたおそれがある（最終報）。","en":"Ransomware encrypted server files; data on 125 employees and 11,587 business contacts may have been stolen (final report, 13 Oct)."},"sources":[{"title":"ランサムウェア感染によるシステム障害発生のお知らせとお詫び（最終報）","publisher":"赤武エンジニアリング","date":"2026-10-13","url":"https://akatake.co.jp/news/2026/4531/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"赤武エンジニアリング","en":"Akatake Engineering"},"group":"ransomware"},{"id":"4adc498554","date":"2026-08-13","occurred":"2026-08-11","disclosed":"2026-08-13","org":{"ja":"株式会社チャーム","en":"Charm Co., Ltd."},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":230000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"8月12日からチャーム本店の1・2号店の注文と発送を停止。モールの他店は8月13日に受注再開","en":"Orders and shipping for Charm Honten stores 1 and 2 halted from Aug 12; other mall branches resumed orders on Aug 13"},"vector":{"ja":"未特定","en":"Not yet identified"},"actor":null,"summary":{"ja":"ペット用品ECの本店サイトに第三者の不正アクセスがあり、約23万件の顧客情報が漏えいした可能性がある。カード情報は含まれない。","en":"A third party breached the pet-supplies retailer's main online stores, possibly exposing about 230,000 customer records. Card data was not included."},"sources":[{"title":"不正アクセスによるシステム障害発生に関するお知らせとお詫び","publisher":"チャーム","date":"2026-08-13","url":"https://charm.co.jp/honten/info/notice/20260813.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"チャーム","en":"Charm"},"group":"access"},{"id":"b50ba2a5c5","date":"2026-08-15","occurred":"2026-08-12","disclosed":"2026-08-15","org":{"ja":"株式会社両毛システムズ","en":"Ryomo Systems Co., Ltd."},"sector":"it_cloud","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"VPNアカウントの悪用（9月の第3報）","en":"Abuse of a VPN account (per the September third report)"},"actor":null,"summary":{"ja":"自治体や企業向けのシステム会社で、VPNアカウントを悪用した侵入があり、後にランサムウェア攻撃と確認された。取引先の顧客情報を含む個人情報などが漏えいしたおそれがある。","en":"Attackers entered this systems vendor, which serves municipalities and companies, through a VPN account. The attack was later confirmed as ransomware, and data including clients' customer information may have leaked."},"sources":[{"title":"当社社内システムへの不正アクセスに関するお知らせ","publisher":"両毛システムズ","date":"2026-08-15","url":"https://www.ryomo.co.jp/news/202608_02.html"},{"title":"当社社内システムへの不正アクセスに関するお知らせ（第3報）","publisher":"両毛システムズ","date":"2026-09","url":"https://www.ryomo.co.jp/news/202609_02.html"},{"title":"Ryomo Systems unauthorized access article","publisher":"Rocket Boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/security-measures-lab/ryomo-systems-internal-system-unauthorized-access/"},{"title":"セキュリティインシデント 2026","publisher":"westeria.jp","url":"https://westeria.jp/security-incidents/2026/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"両毛システムズ","en":"Ryomo Systems"},"group":"ransomware"},{"id":"5c96455ca2","date":"2026-08-17","occurred":"2026-08-09","disclosed":"2026-08-17","org":{"ja":"さくらインターネット株式会社","en":"SAKURA internet Inc."},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":1360563,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"レンタルサーバーの一部機能を制限（DBアップグレード、プラン変更、移行ツール）","en":"Some rental-server functions restricted (DB upgrades, plan changes, migration tools)"},"vector":{"ja":"自社の管理環境から顧客環境へ侵入され、サーバーにマルウェアを設置。販売システムへの経路は非公表","en":"Attacker reached customer environments through the company's own management environment; malware placed on servers; sales-system route withheld"},"actor":null,"summary":{"ja":"管理環境を経由してレンタルサーバの一部顧客環境に不正アクセスされ、マルウェアも設置された。その後、販売管理システムへの不正アクセスも判明し、最大約136万アカウントに影響の可能性がある。","en":"Attackers used the company's management environment to reach some rental-server customer environments and planted malware. A sales-management system breach was found later, possibly affecting about 1.36M accounts."},"sources":[{"title":"当社レンタルサーバーサービスの一部環境に対する不正なアクセスについて","publisher":"さくらインターネット","date":"2026-08-17","url":"https://www.sakura.ad.jp/corporate/information/newsreleases/2026/08/17/1968225614/"},{"title":"当社システムへの不正アクセスに関するお知らせ（第二報）","publisher":"さくらインターネット","date":"2026-08-19","url":"https://www.sakura.ad.jp/corporate/information/newsreleases/2026/08/19/1968225633/"},{"title":"さくらインターネットへの不正アクセスについてまとめてみた","publisher":"piyolog","date":"2026-08-20","url":"https://piyolog.hatenadiary.jp/entry/2026/08/20/023850"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"さくらインターネット","en":"SAKURA internet"},"group":"access"},{"id":"825ff78d21","date":"2026-08-18","occurred":"2026-08-10","disclosed":"2026-08-18","org":{"ja":"株式会社VOISING","en":"VOISING Inc."},"sector":"media_entertainment","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"8月17日1:55までに影響のあるシステムを停止・切断","en":"Affected system shut down and disconnected by 01:55 on Aug 17"},"vector":{"ja":"社内BIツールの脆弱性の疑い（ツール名は非公表）","en":"Suspected vulnerability in an internal BI tool (tool not named)"},"actor":null,"summary":{"ja":"社内のBIツールに外部から不正アクセスされ、保管されていた顧客の個人情報や利用履歴がダウンロードされた。","en":"Attackers broke into an internal BI analytics tool and downloaded stored customer personal data and usage history."},"sources":[{"title":"当社が利用するBIツールへの不正アクセスおよび個人情報漏えいに関するお詫びとお知らせ","publisher":"VOISING","date":"2026-08-18","url":"https://voising-official.com/news/931"},{"title":"VOISING が利用する BI ツールに不正アクセス、保管されていたデータの不正取得を確認","publisher":"ScanNetSecurity","date":"2026-09-07","url":"https://scan.netsecurity.ne.jp/article/2026/09/07/56144.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"VOISING","en":"VOISING"},"group":"access"},{"id":"8b6dabe0cc","date":"2026-08-21","occurred":"2026-04-05","disclosed":"2026-08-21","org":{"ja":"楽天ブックスネットワーク株式会社","en":"Rakuten Books Network Co., Ltd."},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":33333,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"外部の者が社内PCの一部に侵入。手口は非公表","en":"Outside party accessed some company PCs; method not disclosed"},"actor":null,"summary":{"ja":"社外の第三者が一部の業務用PCに不正アクセスし、そのPCに楽天ブックス利用者の配送情報などが保存されていた。漏えいの事実は確認されていないとしている。","en":"An outside party accessed some company work PCs that held Rakuten Books customer shipping data, plus business-contact and employee data. The company says no actual leak has been confirmed."},"sources":[{"title":"当社における不正アクセスに関するお詫びとお知らせ","publisher":"楽天ブックスネットワーク","date":"2026-08-21","url":"https://www.rakuten-booksnetwork.co.jp/2026/08/21/unauthorized-access-notice/index.html"},{"title":"楽天ブックスネットワークのPC端末に不正アクセス、「楽天ブックス」利用者33,333件の個人情報等を保存","publisher":"ScanNetSecurity","date":"2026-08-25","url":"https://scan.netsecurity.ne.jp/article/2026/08/25/56015.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"楽天ブックスネットワーク","en":"Rakuten Books Network"},"group":"access"},{"id":"182e244451","date":"2026-08-21","occurred":"2026-08-17","disclosed":"2026-08-21","org":{"ja":"０１銀行株式会社","en":"01Bank Co., Ltd."},"sector":"finance","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":100,"cost_jpy":null,"outage":null,"vector":{"ja":"非公表","en":"Not disclosed"},"actor":null,"summary":{"ja":"銀行システムに第三者の不正アクセスがあり、システムで使う顧客識別情報とメールアドレスが窃取・漏えいした。対象は最大100社だが、特定には至っていない。","en":"An outside party breached the bank's system and stole customer identifiers and email addresses for up to 100 corporate customers, who have not yet been identified."},"sources":[{"title":"当行システムに対する不正アクセスおよび情報漏えい発生のお知らせ","publisher":"01銀行","date":"2026-08-27","url":"https://01bank.co.jp/news/pdf/2026/0827.pdf"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"０１銀行","en":"01Bank"},"group":"access"},{"id":"f15104222a","date":"2026-08-24","occurred":"2026-08-11","disclosed":"2026-08-24","org":{"ja":"全日空商事株式会社（選べるe-GIFT）","en":"ANA Trading Co., Ltd. (e-GIFT service)"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"一部サービスを停止","en":"Some services suspended"},"vector":{"ja":"サービスの管理・運用システムへの不正アクセス。手口は非公表","en":"Unauthorized access to the service's management and operations system; method not disclosed"},"actor":null,"summary":{"ja":"法人向けデジタルギフトの管理システムに不正アクセスがあり、契約企業担当者の情報が閲覧されたほか、一部のe-GIFTが第三者に不正交換された。","en":"Intruders reached the corporate e-gift management system, viewed some client contact data and fraudulently redeemed some e-gifts."},"sources":[{"title":"「選べるe-GIFT」に対する不正アクセスについて（第1報）","publisher":"全日空商事","date":"2026-08-24","url":"https://www.anatc.com/pressroom/20260824_01/"},{"title":"全日空商事「選べるe-GIFT」に不正アクセス、第三者に不正に交換された事象も確認","publisher":"ScanNetSecurity","date":"2026-08-27","url":"https://scan.netsecurity.ne.jp/article/2026/08/27/56047.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"全日空商事","en":"ANA Trading"},"group":"access"},{"id":"2379f235a2","date":"2026-08-25","occurred":"2026-08-03","disclosed":"2026-08-25","org":{"ja":"日本大学法学部","en":"Nihon University College of Law"},"sector":"education","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"職員がフィッシングリンクをクリックし、アカウント情報を窃取された","en":"Staff member clicked a phishing link and the account credentials were stolen"},"actor":null,"summary":{"ja":"職員1名がフィッシングメールのリンクを開いてアカウントを乗っ取られ、連絡先あてに不審メールが大量送信された。メールボックス内の個人情報が取得された可能性も否定できない。","en":"One staff account was hijacked through phishing and used to send a large volume of suspicious mail to contacts. Personal data in the mailbox may also have been accessed."},"sources":[{"title":"不正アクセスによる迷惑メール発信に関するおわびと御報告","publisher":"日本大学法学部","date":"2026-08-25","url":"https://www.law.nihon-u.ac.jp/news/32260"},{"title":"3,177件の不審メールを送信 ～ 日本大学法学部教職員への巧妙に偽装されたフィッシングメールによる「アカウント乗っ取り」","publisher":"ScanNetSecurity","date":"2026-08-28","url":"https://scan.netsecurity.ne.jp/article/2026/08/28/56067.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日本大学法学部","en":"Nihon University College of Law"},"group":"other"},{"id":"a3f598af60","date":"2026-08-26","occurred":"2026-08-25","disclosed":"2026-08-26","org":{"ja":"日鉄興和不動産株式会社","en":"Nippon Steel Kowa Real Estate Co., Ltd."},"sector":"services","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"影響を受けたクラウドサービスを切断","en":"Affected cloud service disconnected"},"vector":{"ja":"利用中のクラウドサービスの一部に第三者がアクセス（サービス名は非公表）","en":"Third-party access to part of a cloud service the company uses (service not named)"},"actor":null,"summary":{"ja":"マンション販売業務等の顧客情報を保存するクラウドサービスの一部に第三者の不正アクセスがあった。漏えいは確認されていないとしている。","en":"A third party accessed part of a cloud service holding condominium-sales customer data. The company says no leak has been confirmed."},"sources":[{"title":"当社が利用するクラウドサービスへの不正アクセスに関するお知らせ","publisher":"日鉄興和不動産","date":"2026-08-26","url":"https://www.nskre.co.jp/company/news/2026/20260826.html"},{"title":"日鉄興和不動産が利用するクラウドサービスに不正アクセス、マンション販売業務等に関する顧客情報を保存","publisher":"ScanNetSecurity","date":"2026-09-16","url":"https://scan.netsecurity.ne.jp/article/2026/09/16/56246.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日鉄興和不動産","en":"Nippon Steel Kowa Real Estate"},"group":"access"},{"id":"86bd61a48a","date":"2026-08-27","occurred":null,"disclosed":"2026-08-27","org":{"ja":"国立大学法人山梨大学","en":"University of Yamanashi"},"sector":"education","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"契約中のレンタルサーバー上のサイトを停止（ScanNetSecurityの見出しでは54サイト）","en":"Websites on a contracted rental server taken offline (ScanNetSecurity headline: 54 sites)"},"vector":{"ja":"Joomla拡張機能「JCE」の脆弱性を悪用。WebShellを設置され、同じサーバーの他サイトへ拡大","en":"Vulnerability in the Joomla extension JCE exploited; WebShell installed, then spread to other sites on the same server"},"actor":null,"summary":{"ja":"大学が契約するレンタルサーバ上のCMS拡張機能の脆弱性が悪用され、WebShell経由で同じサーバ上の複数サイトが改ざんされた。情報流出は確認されていない。","en":"Attackers exploited a CMS extension flaw on a rental server the university uses, then used a WebShell to deface several sites on that server. No data leak has been confirmed."},"sources":[{"title":"レンタルサーバ上のWebサイト改ざんに関するお知らせ","publisher":"山梨大学","date":"2026-08-27","url":"https://sojo.yamanashi.ac.jp/maintenance/6757/"},{"title":"54サイトが閲覧不可に ～ 山梨大学が契約しているレンタルサーバでのWebサイト改ざん","publisher":"ScanNetSecurity","date":"2026-09-17","url":"https://scan.netsecurity.ne.jp/article/2026/09/17/56253.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"山梨大学","en":"University of Yamanashi"},"group":"access"},{"id":"e6dd42bbfd","date":"2026-08-28","occurred":"2026-08-18","disclosed":"2026-08-28","org":{"ja":"イエローハット（WEB作業予約システム）","en":"Yellow Hat (web service-booking system)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":1797124,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"予約システムへの不正侵入（手口は未記載）","en":"Unauthorized intrusion into the booking system (method not specified)"},"actor":null,"summary":{"ja":"WEB作業予約システムへの不正侵入で、会員179万7124名分の氏名・住所・生年月日・パスワード（復元不可形式）などが流出したと最終報で確定した。","en":"An intrusion into Yellow Hat's online service-booking system leaked data on 1,797,124 members, including name, address, birth date and non-reversible passwords (final report, 15 Oct)."},"sources":[{"title":"当社WEB作業予約システムへの不正アクセスに関するご報告（第二報・最終報）","publisher":"イエローハット","date":"2026-10-15","url":"https://www.yellowhat.jp/information/yellowhat/202610_2.html"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"},{"title":"イエローハットにおける不正アクセスによる個人情報漏えいの可能性に関するお詫びとお知らせ","publisher":"イエローハット","date":"2026-08-28","url":"https://www.yellowhat.jp/information/yellowhat/202608.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"イエローハット","en":"Yellow Hat"},"group":"access"},{"id":"e6c5ef808a","date":"2026-08-28","occurred":"2026-08-23","disclosed":"2026-08-28","org":{"ja":"カインドオル（トレジャー・ファクトリー子会社）","en":"Kindal Co., Ltd. (Treasure Factory subsidiary)"},"sector":"retail_food","type":"account_takeover","via_vendor":false,"records":136464,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"ECプラットフォーム運営会社を装うフィッシングメールでスタッフのログイン情報を窃取。二要素認証なし","en":"Phishing email posing as the EC platform operator captured a staff account login; no two-factor authentication"},"actor":null,"summary":{"ja":"ECプラットフォーム運営者を装うフィッシングでスタッフアカウントが乗っ取られ、顧客情報が一括エクスポートされた。","en":"Phishing posing as the e-commerce platform operator captured a staff login, which was used to bulk-export customer data."},"sources":[{"title":"不正アクセスによるお客様情報漏えいに関するお詫びとお知らせ","publisher":"カインドオル","date":"2026-08-28","url":"https://www.kind.co.jp/notice-20260828"},{"title":"顧客情報の一括エクスポートを確認 ～ カインドオルが利用するECプラットフォームに不正アクセス","publisher":"ScanNetSecurity","date":"2026-09-18","url":"https://scan.netsecurity.ne.jp/article/2026/09/18/56270.html"},{"title":"当社連結子会社における不正アクセスによる個人情報漏えいに関する調査結果及び再発防止策について（第三報）","publisher":"トレジャー・ファクトリー","date":"2026-10-13","url":"https://ssl4.eir-parts.net/doc/3093/tdnet/2893776/00.pdf"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"カインドオル","en":"Kindal"},"group":"other"},{"id":"86d90b2908","date":"2026-08-28","occurred":"2026-08-24","disclosed":"2026-08-28","org":{"ja":"株式会社コロナ","en":"Corona Corporation"},"sector":"manufacturing","type":"supply_chain","via_vendor":true,"records":35000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"工事情報の管理に使う外部クラウドサービスへの不正アクセス","en":"Unauthorized access to an external cloud service used to manage construction information"},"actor":"MetaEncryptor (leak-site claim reported by Rocket Boys; not confirmed by Corona)","summary":{"ja":"施工情報を管理する外部クラウドサービスに第三者が不正アクセスし、最大3万5千人分の顧客の氏名・住所や施工関連資料が漏えいした可能性がある。","en":"A third party breached an outside cloud service holding the company's construction records, possibly exposing names, addresses and job documents for up to 35,000 customers."},"sources":[{"title":"当社が利用するクラウドサービスへの不正アクセスによる個人情報漏えいの可能性に関するお知らせ（お詫び）","publisher":"コロナ","date":"2026-08-28","url":"https://www.corona.co.jp/news/other/post-439.html"},{"title":"Corona cloud ransomware 35,000 leak article","publisher":"Rocket Boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/security-measures-lab/corona-cloud-ransomware-35000-leak/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"コロナ","en":"Corona"},"group":"access"},{"id":"7035a0dfd1","date":"2026-08-28","occurred":"2026-08-27","disclosed":"2026-08-28","org":{"ja":"生活協同組合コープやまぐち","en":"Coop Yamaguchi"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"LINEミニアプリのデータベースの全データが削除","en":"All data in the LINE mini-app database deleted"},"vector":{"ja":"委託先のLINEミニアプリのデータベースに第三者がアクセス。手口は未記載","en":"Third-party access to the database of an outsourced LINE mini-app; method not described"},"actor":null,"summary":{"ja":"外部委託で運営するLINEミニアプリのデータベースに不正アクセスがあり、データが全て削除された。個人情報漏えいのおそれもある。","en":"Intruders accessed the database behind an outsourced LINE mini-app and deleted all its data; a personal-data leak is also possible."},"sources":[{"title":"データベース内の全てのデータを削除 ～「コープやまぐちLINEミニアプリ」に不正アクセス","publisher":"ScanNetSecurity","date":"2026-09-17","url":"https://scan.netsecurity.ne.jp/article/2026/09/17/56258.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"生活協同組合コープやまぐち","en":"Coop Yamaguchi"},"group":"access"},{"id":"48a8f396e7","date":"2026-08-28","occurred":null,"disclosed":"2026-08-28","org":{"ja":"静銀ティーエム証券株式会社","en":"Shizugin TM Securities Co., Ltd."},"sector":"finance","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"フィッシングの疑い（不審なSMSから偽サイトへ誘導）","en":"Phishing suspected (fake site reached through suspicious SMS)"},"actor":null,"summary":{"ja":"フィッシング詐欺等によるとみられる顧客口座への不正アクセスと不正取引を確認した。","en":"The brokerage found unauthorized access and unauthorized trades in customer accounts, apparently linked to phishing."},"sources":[{"title":"【重要なお知らせ】当社のお客さまの口座への不正アクセス・不正取引を確認しました","publisher":"静銀ティーエム証券","date":"2026-08-28","url":"https://www.shizugintm.co.jp/topics/01u79ob5df140to9t.html"},{"title":"フィッシング詐欺等によるものとみられる不正アクセス・不正取引を確認 ～ 静銀ティーエム証券","publisher":"ScanNetSecurity","date":"2026-09-18","url":"https://scan.netsecurity.ne.jp/article/2026/09/18/56273.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"静銀ティーエム証券","en":"Shizugin TM Securities"},"group":"other"},{"id":"57dc29c680","date":"2026-08-28","occurred":null,"disclosed":"2026-08-28","org":{"ja":"株式会社T&K TOKA","en":"T&K TOKA Co., Ltd."},"sector":"manufacturing","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"一部業務を停止","en":"Some operations suspended"},"vector":{"ja":"非公表","en":"Not disclosed"},"actor":null,"summary":{"ja":"一部システムへの第三者の不正アクセスでランサムウェア被害を確認し、一部業務を停止した。","en":"Ransomware hit some systems after a third-party intrusion, and part of the company's operations was suspended."},"sources":[{"title":"当社システムへの不正アクセスに関するお知らせ","publisher":"T&K TOKA","date":"2026-08-28","url":"https://www.toka-global.com/news/detail/post_210.html"},{"title":"T&K TOKA ransomware investigation article","publisher":"Rocket Boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/security-measures-lab/tk-toka-ransomware-investigation/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"T&K TOKA","en":"T&K TOKA"},"group":"ransomware"},{"id":"221b7fedf9","date":"2026-08-30","occurred":"2026-08-27","disclosed":"2026-08-30","org":{"ja":"株式会社まんだらけ","en":"Mandarake Inc."},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"通販とオークションを停止。通販は9月5日12:00再開予定、「Daily Auction」は9月7日再開、「Big Web Auction」は延期","en":"Online store and auction sites suspended; mail-order restart scheduled for 12:00 on Sep 5; Daily Auction resumed Sep 7; Big Web Auction postponed from Sep 1"},"vector":{"ja":"非公表","en":"Not disclosed"},"actor":null,"summary":{"ja":"サーバへの不正アクセスを検知し、通販・オークションを停止した。8月28日6時までの通販注文の氏名・住所等が漏えいした可能性がある。","en":"After detecting a server intrusion, the company suspended mail-order and auctions. Contact details for orders placed up to 06:00 on Aug 28 may have leaked."},"sources":[{"title":"Maintenance / incident notice","publisher":"まんだらけ","url":"https://www.mandarake.co.jp/maintenance.html"},{"title":"Mandarake shop suspension leak article","publisher":"Rocket Boys セキュリティ対策Lab","date":"2026-09-01","url":"https://rocket-boys.co.jp/security-measures-lab/mandarake-shop-suspension-leak/"},{"title":"2026年8月 セキュリティインシデントニュースまとめ","publisher":"UNITIS","date":"2026-09-14","url":"https://unitis.jp/articles/24442/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"まんだらけ","en":"Mandarake"},"group":"access"},{"id":"cc5b4aa8af","date":"2026-09-01","occurred":"2026-08-28","disclosed":"2026-09-01","org":{"ja":"三井不動産株式会社","en":"Mitsui Fudosan Co., Ltd."},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":55000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"グループの一部システムの認証情報を悪用（第2報で、調査により悪用を確認）","en":"Misuse of credentials for some group systems (second report: the investigation confirmed the attacker misused credentials)"},"actor":null,"summary":{"ja":"三井不動産グループが使う一部システムの資格情報が不正利用され、役職員と社外関係者の情報が閲覧された可能性がある。第二報で攻撃者による資格情報の不正利用が確認された。","en":"Credentials for some Mitsui Fudosan group systems were misused, and staff and external contacts' data may have been viewed. The second report confirmed the attacker had misused the credentials."},"sources":[{"title":"不正アクセスによる情報漏えいの可能性について","publisher":"三井不動産株式会社","date":"2026-09-01","url":"https://www.mitsuifudosan.co.jp/letter/260901/download/260901.pdf"},{"title":"不正アクセスによる情報漏えいの可能性について（第二報）","publisher":"三井不動産株式会社","date":"2026-09-28","url":"https://www.mitsuifudosan.co.jp/letter/260928/download/260928.pdf"},{"title":"資格情報の不正利用でシステム閲覧被害 ～ 三井不動産、最大5.5万件の情報漏えいの可能性","publisher":"ScanNetSecurity","date":"2026-09-07","url":"https://scan.netsecurity.ne.jp/article/2026/09/07/56140.html"},{"title":"三井不動産への不正アクセス、攻撃者による資格情報の不正利用を確認","publisher":"ScanNetSecurity","date":"2026-10-16","url":"https://scan.netsecurity.ne.jp/article/2026/10/16/56479.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"三井不動産","en":"Mitsui Fudosan"},"group":"access"},{"id":"9953cd7b6a","date":"2026-09-03","occurred":"2026-09-02","disclosed":"2026-09-03","org":{"ja":"鳥取県（環境放射線モニタリングシステム）","en":"Tottori Prefectural Government (environmental radiation monitoring system)"},"sector":"government","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"主監視局のサーバーが暗号化されシステム停止。遠隔の副局は放射線監視を継続","en":"Main monitoring-station server encrypted and the system stopped; the remote sub-station kept radiation monitoring running"},"vector":null,"actor":null,"summary":{"ja":"県庁内の主監視局サーバがランサムウェアで暗号化され停止したが、副監視局で放射線監視は継続した。システムは県庁の行政ネットワークと分離されていた。","en":"Ransomware encrypted the prefecture's main radiation-monitoring server and stopped it, while a backup station kept monitoring. The system ran on a dedicated network separate from the prefecture's administrative network."},"sources":[{"title":"鳥取県環境放射線モニタリングシステムにランサムウェア攻撃、副サーバは被害受けず放射線モニタリングに影響なし","publisher":"ScanNetSecurity","date":"2026-09-16","url":"https://scan.netsecurity.ne.jp/article/2026/09/16/56244.html"},{"title":"鳥取県、環境放射線モニタリングシステムにランサムウェア 攻撃 主監視局停止も放射線監視は継続","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-09-07","url":"https://rocket-boys.co.jp/?p=40037"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"鳥取県","en":"Tottori Prefecture"},"group":"ransomware"},{"id":"430d886029","date":"2026-09-03","occurred":null,"disclosed":"2026-09-03","org":{"ja":"浜銀TT証券株式会社","en":"Hamagin Tokai Tokyo Securities"},"sector":"finance","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"顧客のログイン情報とパスキー登録情報を奪うフィッシング","en":"Phishing that captured customer login and passkey-registration credentials"},"actor":null,"summary":{"ja":"フィッシングで認証情報が盗まれ、オンライン取引サービスで投資信託の不正売買が発生した。","en":"Phishing gave criminals customers' online-trading credentials, which they used to buy and sell investment trusts without authorisation."},"sources":[{"title":"パスキー設定を要請 ～ 浜銀TT証券でフィッシングによる不正アクセス・取引被害発生","publisher":"ScanNetSecurity","date":"2026-09-08","url":"https://scan.netsecurity.ne.jp/article/2026/09/08/56154.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"浜銀TT証券","en":"Hamagin Tokai Tokyo Securities"},"group":"other"},{"id":"2310bf2775","date":"2026-09-04","occurred":null,"disclosed":"2026-09-04","org":{"ja":"東日本高速道路株式会社（東京外環プロジェクトホームページ）","en":"NEXCO East (Tokyo Outer Ring Road project website)"},"sector":"infrastructure_energy","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"プロジェクトのWebサイトを停止","en":"Project website taken offline"},"vector":null,"actor":null,"summary":{"ja":"東京外環プロジェクトのWebサイトで第三者による不正アクセスが疑われ、公開を一時停止した。","en":"NEXCO East took its Tokyo Outer Ring Road project website offline over suspected unauthorized access."},"sources":[{"title":"NEXCO東日本の東京外環プロジェクトホームページで不正アクセス疑い","publisher":"ScanNetSecurity","date":"2026-09-10","url":"https://scan.netsecurity.ne.jp/article/2026/09/10/56190.html"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"東日本高速道路","en":"NEXCO East"},"group":"access"},{"id":"c5188dfbcf","date":"2026-09-07","occurred":"2026-08-28","disclosed":"2026-09-07","org":{"ja":"国立大学法人東京科学大学","en":"Institute of Science Tokyo"},"sector":"education","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"情報基盤への不正アクセスで、旧東工大・旧医科歯科大の在籍者を含む学生・教職員の氏名、住所、メールアドレスが漏えいした疑いがある。大学病院の患者情報の漏えいは確認されていない。","en":"Unauthorized access to the university's IT infrastructure may have exposed names, addresses and emails of students and staff, including people from the two pre-merger universities. No leak of hospital patient data has been confirmed."},"sources":[{"title":"東京科学大学の情報基盤に不正アクセス、個人情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-09-10","url":"https://scan.netsecurity.ne.jp/article/2026/09/10/56191.html"},{"title":"東京科学大学の情報基盤に不正アクセス 氏名・住所・メールアドレス含む個人情報漏えいの疑い","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-09-08","url":"https://rocket-boys.co.jp/?p=40178"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"東京科学大学","en":"Institute of Science Tokyo"},"group":"access"},{"id":"316bc230c3","date":"2026-09-08","occurred":null,"disclosed":"2026-09-08","org":{"ja":"日本トレクス株式会社（極東開発工業グループ）","en":"Nippon Trex Co., Ltd. (Kyokuto Kaihatsu Kogyo group)"},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"オンライン受注、指定顧客向け部品発注システム、メールを停止（FAXで代替）。9月30日に再開","en":"Online ordering, parts-ordering system for designated customers, and email were stopped (FAX used instead); resumed 9/30"},"vector":null,"actor":null,"summary":{"ja":"不正アクセスによるシステム障害で発注業務やメールが停止したが、9月30日に業務を再開した。情報流出は確認されていない。","en":"Unauthorized access caused a system outage that stopped ordering and email at the trailer maker. Operations resumed on Sept 30, and no data leak has been confirmed."},"sources":[{"title":"弊社情報システムへの不正アクセスによる情報流出の可能性に関するお詫びとお知らせ","publisher":"日本トレクス","date":"2026-09-11","url":"https://www.trex.co.jp/news/news20260911-12711/"},{"title":"極東開発工業子会社の日本トレクス、不正アクセスによるシステム障害を発表","publisher":"ScanNetSecurity","date":"2026-09-25","url":"https://scan.netsecurity.ne.jp/article/2026/09/25/56303.html"},{"title":"日本トレクス、不正アクセスから復旧","publisher":"rocket-boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/?p=41902"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日本トレクス","en":"Nippon Trex"},"group":"access"},{"id":"a45fca7178","date":"2026-09-09","occurred":"2026-08-09","disclosed":"2026-09-09","org":{"ja":"株式会社ApplyNow","en":"ApplyNow Inc."},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":17,"cost_jpy":null,"outage":null,"vector":{"ja":"自社で使うデータ分析ツールの脆弱性を悪用（製品名とCVEは非公表）","en":"Exploited vulnerability in a data-analysis tool used by the company (product and CVE not disclosed)"},"actor":null,"summary":{"ja":"採用管理SaaS（Interview Cloud、ApplyNow、ApplyNow Sign）のデータベースに不正アクセスがあり、利用企業や自治体の応募者情報が漏えいした可能性がある。ApplyNow Signではマイナンバー等が含まれる場合がある。","en":"Attackers accessed the database behind ApplyNow's recruiting SaaS products, exposing applicant data from client companies and municipalities. Some ApplyNow Sign records may include My Number, bank and pension details."},"sources":[{"title":"ApplyNow 提供の採用管理プラットフォームに不正アクセス、マイナンバー含む個人データが漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-09-25","url":"https://scan.netsecurity.ne.jp/article/2026/09/25/56304.html"},{"title":"ApplyNow 不正アクセスによるサイバー攻撃のまとめ","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-09-18","url":"https://rocket-boys.co.jp/security-measures-lab/applynow-municipal-applicant-data-report/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ApplyNow","en":"ApplyNow"},"group":"access"},{"id":"c64099ac3c","date":"2026-09-11","occurred":"2026-06-25","disclosed":"2026-09-11","org":{"ja":"デジタル庁（ガバメントソリューションサービス GSS）","en":"Digital Agency (Government Solution Service, GSS)"},"sector":"government","type":"unauthorized_access","via_vendor":false,"records":246000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"ネットワーク接続のVPN機器の脆弱性を突かれ（CVE番号は非公表）、その後に保守担当者のアカウントを悪用","en":"Vulnerability in a network-connected VPN device (CVE not disclosed); the attacker then used a maintenance staff account"},"actor":null,"summary":{"ja":"政府共通基盤GSSにVPN機器の脆弱性を突いた侵入があり、府省庁職員や事業者など約24.6万件の個人情報が漏えいした可能性がある。一般国民の情報、マイナンバー、口座情報は含まれないとされる。","en":"Attackers exploited a VPN device vulnerability to enter the government-wide GSS platform, possibly exposing about 246,000 records of public officials and contractors. The agency says no general-public data, My Number or bank details were included."},"sources":[{"title":"ガバメントソリューションサービスへの不正アクセスについて","publisher":"デジタル庁","date":"2026-09-11","url":"https://www.digital.go.jp/news/2026-0911-01"},{"title":"VPNの脆弱性を利用 ～ デジタル庁が運用するGSSに不正アクセス、約24.6万件の個人情報が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-09-14","url":"https://scan.netsecurity.ne.jp/article/2026/09/14/56223.html"},{"title":"タイムズ、デジタル庁、不正アクセス続出の“魔の9月”","publisher":"ITmedia @IT","date":"2026-10-11","url":"https://atmarkit.itmedia.co.jp/ait/articles/2610/11/news002.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"デジタル庁","en":"Digital Agency"},"group":"access"},{"id":"3761c47095","date":"2026-09-11","occurred":"2026-09-10","disclosed":"2026-09-11","org":{"ja":"ロート製薬株式会社","en":"Rohto Pharmaceutical Co., Ltd."},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"通信販売事業で使うシステムへの第三者による不正アクセスの可能性を確認し、アクセス制限を行った。","en":"Rohto found possible unauthorized access to a system used for its mail-order business and restricted access to it."},"sources":[{"title":"当社システムにおける不正アクセスの可能性について","publisher":"ロート製薬","date":"2026-09-11","url":"https://www.rohto.co.jp/news/whatsnew/2026/0911_01"},{"title":"2026年9月 サイバー攻撃の被害 事例 まとめ","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-10-01","url":"https://rocket-boys.co.jp/security-measures-lab/2026-09-latest-cyber-attack-cases/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ロート製薬","en":"Rohto Pharmaceutical"},"group":"access"},{"id":"f97d597495","date":"2026-09-14","occurred":"2026-09-10","disclosed":"2026-09-14","org":{"ja":"株式会社キングプリンターズ","en":"King Printers Co., Ltd."},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"9月10日18時から9月14日16時までサイトと関連機能を停止","en":"Site and related functions stopped from 18:00 on 10 Sep to 16:00 on 14 Sep"},"vector":{"ja":"システム基盤への不正アクセス。同社の認証情報を使った生成AIサービスの不正利用が目的とみられる","en":"Intrusion into the system platform, apparently to abuse the company's credentials for a generative-AI service"},"actor":null,"summary":{"ja":"ネット印刷のキングプリンターズがシステム基盤への不正アクセスを検知し、約4日間サイトを停止した。第2報（9月25日）では、同社の認証情報を使った生成AIサービスの不正利用が目的とみられ、個人情報の漏えいは確認されていないとした。","en":"Online printer King Printers detected an intrusion into its system platform and took its site offline for about four days. Its second report (25 Sep) said the aim appeared to be abuse of the company's credentials for a generative-AI service, and no personal-data leak had been found."},"sources":[{"title":"不正アクセス検知に伴うシステム停止・サービス再開および調査状況のお知らせ","publisher":"キングプリンターズ","date":"2026-09-14","url":"https://kingprinters.com/news/2026/oshirase_20260914-2"},{"title":"不正アクセス検知に伴う調査状況のお知らせ【第2報】","publisher":"キングプリンターズ","date":"2026-09-25","url":"https://kingprinters.com/news/2026/oshirase_20260925"},{"title":"キングプリンターズに不正アクセス、認証情報を用いた生成 AI サービスの不正利用が目的","publisher":"ScanNetSecurity","date":"2026-10-15","url":"https://scan.netsecurity.ne.jp/article/2026/10/15/56458.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"キングプリンターズ","en":"King Printers"},"group":"access"},{"id":"14250a56d2","date":"2026-09-15","occurred":null,"disclosed":"2026-09-15","org":{"ja":"株式会社LEAN BODY","en":"LEAN BODY Inc."},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":440000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"分析ツールMetabaseの脆弱性（CVEとバージョンは非公表）","en":"Vulnerability in the Metabase analytics tool (CVE and version not disclosed)"},"actor":null,"summary":{"ja":"分析ツールMetabaseの脆弱性が悪用され、オンラインフィットネスサービスの顧客情報がデータベースから取得された。","en":"Attackers exploited the Metabase analytics tool to pull customer data from the online fitness service's database."},"sources":[{"title":"LEAN BODY が利用する分析ツール「Metabase」の脆弱性を悪用した不正アクセス","publisher":"ScanNetSecurity","date":"2026-10-05","url":"https://scan.netsecurity.ne.jp/article/2026/10/05/56382.html"},{"title":"LEAN BODY 分析ツールへの不正アクセス","publisher":"rocket-boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/?p=40986"},{"title":"国内の個人情報漏洩・漏洩の恐れ、2026年9〜10月の主要案件で延べ1億件相当超","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-10-13","url":"https://rocket-boys.co.jp/security-measures-lab/2026-sep-oct-japan-data-breach-exposure-scale/"}],"confidence":"medium","wave":true,"landmark":false,"short":{"ja":"LEAN BODY","en":"LEAN BODY"},"group":"access"},{"id":"9c328b95e5","date":"2026-09-16","occurred":"2026-09-11","disclosed":"2026-09-16","org":{"ja":"株式会社Helpfeel（Gyazo）","en":"Helpfeel Inc. (Gyazo)"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":23620000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"画像配信を停止し、セキュリティ対応のためGyazoを休止。9月27日に再開","en":"Image delivery halted and Gyazo suspended for security maintenance; resumed 9/27"},"vector":{"ja":"Gyazoの画像アップロードサーバーに、任意のコマンドを実行できる脆弱性","en":"Vulnerability in Gyazo's image upload server allowing arbitrary command execution"},"actor":null,"summary":{"ja":"画像共有サービスGyazoのアップロードサーバの脆弱性が悪用され、ユーザー関連データ約2,362万件と画像メタデータ約4.9億件が流出した。","en":"Attackers exploited a flaw in Gyazo's upload server and took about 23.62 million user-related records plus about 490 million image-metadata records."},"sources":[{"title":"Gyazoへの不正アクセスに関するお知らせ","publisher":"Helpfeel","date":"2026-09-16","url":"https://corp.helpfeel.com/news/news-20260916-1"},{"title":"2026年9月 サイバー攻撃の被害 事例 まとめ","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-10-01","url":"https://rocket-boys.co.jp/security-measures-lab/2026-09-latest-cyber-attack-cases/"},{"title":"「Gyazo」への不正アクセスによる情報漏えいに関するお知らせとお詫び（第二報）","publisher":"Helpfeel","date":"2026-09-25","url":"https://corp.helpfeel.com/news/news-20260925-01"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"Gyazo（Helpfeel）","en":"Gyazo (Helpfeel)"},"group":"access"},{"id":"1f6bda1e5b","date":"2026-09-17","occurred":"2026-09-03","disclosed":"2026-09-17","org":{"ja":"株式会社千葉銀行（子会社ちばぎん商店のサイト）","en":"Chiba Bank (subsidiary Chibagin Shoten's website)"},"sector":"finance","type":"supply_chain","via_vendor":true,"records":2338,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"子会社のコーポレートサイトを公開停止","en":"Subsidiary's corporate site taken offline"},"vector":{"ja":"業務委託先の子会社コーポレートサイトのサーバーへの不正アクセス。オンラインカジノのコンテンツが表示された","en":"Corporate site server of contractor subsidiary compromised; online-casino content planted"},"actor":null,"summary":{"ja":"千葉銀行が業務を委託する子会社ちばぎん商店のコーポレートサイトのサーバーが不正アクセスを受け、デビットカードのプラチナ会員向けギフト申込者（個人約722先・法人約1,616先）の氏名・住所・メールアドレスなどが漏えいしたおそれがある。","en":"The corporate-site server of Chibagin Shoten, a Chiba Bank subsidiary handling outsourced work, was compromised; data of platinum debit-card gift applicants (about 722 individuals and 1,616 corporate customers) may have leaked."},"sources":[{"title":"子会社ちばぎん商店のコーポレートサイトへの不正アクセス事案の発生について","publisher":"千葉銀行","date":"2026-09-17","url":"https://www.chibabank.co.jp/news/news20260917_01"},{"title":"千葉銀の子会社サイトで侵害 - 個人情報流出の可能性","publisher":"Security NEXT","date":"2026-10-07","url":"https://www.security-next.com/190509"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"千葉銀行","en":"Chiba Bank"},"group":"access"},{"id":"5e3a4b3e3c","date":"2026-09-18","occurred":"2026-09-16","disclosed":"2026-09-18","org":{"ja":"JGC Digital株式会社","en":"JGC Digital Co., Ltd."},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":60000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"BIツールMetabaseの脆弱性","en":"Vulnerability in the Metabase BI tool"},"actor":null,"summary":{"ja":"BIツールMetabaseの脆弱性を突いた不正アクセスで、顧客情報約6万件が取得された。","en":"Attackers exploited a Metabase vulnerability and took about 60,000 customer-information items."},"sources":[{"title":"JGC Digital が利用する BI ツール「Metabase」に不正アクセス、約 6 万件の情報が取得されたことを確認","publisher":"ScanNetSecurity","date":"2026-10-09","url":"https://scan.netsecurity.ne.jp/article/2026/10/09/56422.html"}],"confidence":"medium","wave":true,"landmark":false,"short":{"ja":"JGC Digital","en":"JGC Digital"},"group":"access"},{"id":"9930088d94","date":"2026-09-20","occurred":"2026-09-03","disclosed":"2026-09-20","org":{"ja":"GMOインターネット株式会社（ConoHa WING）","en":"GMO Internet, Inc. (ConoHa WING)"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"レンタルサーバConoHa WINGの一部収容ホストに不正アクセスがあり、426アカウントのWeb領域に不正プログラムが設置された。","en":"Attackers got into some ConoHa WING shared hosting servers and planted malicious programs in the web areas of 426 customer accounts."},"sources":[{"title":"ConoHa WING 不正アクセス（セキュリティ対策Lab記事）","publisher":"rocket-boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/security-measures-lab/gmo-conoha-web-server-status-report/"}],"confidence":"medium","wave":true,"landmark":false,"short":{"ja":"GMOインターネット","en":"GMO Internet"},"group":"access"},{"id":"ec7902a527","date":"2026-09-24","occurred":"2026-09-21","disclosed":"2026-09-24","org":{"ja":"池上通信機株式会社","en":"Ikegami Tsushinki Co., Ltd."},"sector":"manufacturing","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":"Qilin (claimed on its leak site; not confirmed by the company)","summary":{"ja":"外部からの情報提供を受けて調査し、9月30日の続報で一部サーバのファイル暗号化を確認した。Qilinがリークサイトに掲載し、66GB取得を主張している。","en":"After an outside tip-off, the broadcast-equipment maker confirmed in its Sept 30 update that files on some servers were encrypted. Qilin listed the company and claims to have taken 66GB."},"sources":[{"title":"当社に対するサイバー攻撃の可能性に関するお知らせ","publisher":"池上通信機","date":"2026-09-24","url":"https://www.ikegami.co.jp/news/detail/571/"},{"title":"池上通信機がサイバー攻撃を調査 ランサムウェア グループ Qilinが66GB・10万超ファイル窃取を主張","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-09-25","url":"https://rocket-boys.co.jp/?p=41399"},{"title":"池上通信機にサイバー攻撃、サーバ内の一部ファイルが暗号化","publisher":"ScanNetSecurity","date":"2026-10-05","url":"https://scan.netsecurity.ne.jp/article/2026/10/05/56384.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"池上通信機","en":"Ikegami Tsushinki"},"group":"ransomware"},{"id":"8b125dcc3c","date":"2026-09-25","occurred":"2026-09-22","disclosed":"2026-09-25","org":{"ja":"株式会社ファインズ","en":"Fines Inc."},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":1536322,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"店舗向け予約システムに不正アクセスがあり、予約者の氏名・電話番号・メールアドレスと予約内容1,536,322件が漏えいした。","en":"Unauthorized access to a store-reservation system exposed 1,536,322 records of names, phone numbers, emails and booking details."},"sources":[{"title":"【速報】弊社システムへの不正アクセスによる情報漏えい","publisher":"ファインズ","date":"2026-09-25","url":"https://e-tenki.co.jp/news/%E5%BC%8A%E7%A4%BE%E3%82%B7%E3%82%B9%E3%83%86%E3%83%A0%E3%81%B8%E3%81%AE%E4%B8%8D%E6%AD%A3%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E3%81%AB%E3%82%88%E3%82%8B%E6%83%85%E5%A0%B1%E6%BC%8F%E3%81%88%E3%81%84/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ファインズ","en":"Fines"},"group":"access"},{"id":"b0424b3986","date":"2026-09-25","occurred":"2026-09-24","disclosed":"2026-09-25","org":{"ja":"国立大学法人佐賀大学","en":"Saga University"},"sector":"education","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"事務用端末を停止（rocket-boysによると9月28日に再開）。教育・研究・医療のシステムは影響なし","en":"Administrative terminals suspended (resumed 9/28 per rocket-boys); education, research and medical systems unaffected"},"vector":null,"actor":null,"summary":{"ja":"事務部門のNAS上のファイルがランサムウェアで暗号化され、事務用端末の利用を停止した。","en":"Ransomware encrypted files on an administrative NAS, and the university suspended use of administrative terminals."},"sources":[{"title":"ランサムウェア被害について","publisher":"佐賀大学","date":"2026-09-25","url":"https://www.saga-u.ac.jp/koho/press/2026092541515"},{"title":"2026年9月 ランサムウェア被害事例まとめ","publisher":"rocket-boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/security-measures-lab/2026-09-ransomware-cases-summary/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"佐賀大学","en":"Saga University"},"group":"ransomware"},{"id":"90fb059574","date":"2026-09-25","occurred":null,"disclosed":"2026-09-25","org":{"ja":"日本郵便株式会社（国際郵便 調査請求Web受付サービス）","en":"Japan Post Co., Ltd. (international mail inquiry web service)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":600,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"国際郵便の調査請求のWeb受付を停止","en":"Web reception for international-mail investigation requests suspended"},"vector":null,"actor":null,"summary":{"ja":"国際郵便の調査請求Web受付サービスのサーバに外部から不正アクセスされた可能性があり、受付を一時停止した。","en":"Japan Post suspended its international-mail inquiry web service after possible unauthorized access to its server."},"sources":[{"title":"調査請求Web受付サービスへの不正アクセスの可能性について","publisher":"日本郵便","date":"2026-09-25","url":"https://www.post.japanpost.jp/newsrelease/pressrelease/6267689171.html"},{"title":"日本郵便 不正アクセスで国際郵便利用者の情報 一時閲覧可能に","publisher":"NHK","date":"2026-10-16","url":"https://news.web.nhk/newsweb/na/nd-20261016de60543"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"日本郵便","en":"Japan Post"},"group":"access"},{"id":"94d0692696","date":"2026-09-25","occurred":null,"disclosed":"2026-09-25","org":{"ja":"株式会社スマレジ（スマレジEC・リピート／B2B）","en":"Smaregi, Inc. (Smaregi EC Repeat / B2B)"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":4,"cost_jpy":null,"outage":null,"vector":{"ja":"顧客向け管理画面のログイン機能の脆弱性（9月18日に修正）","en":"Vulnerability in the customer admin-screen login function (fixed 9/18)"},"actor":null,"summary":{"ja":"EC向けSaaSの管理画面ログイン機能の脆弱性が悪用され、利用企業4社の顧客・注文・管理者情報が閲覧・取得された可能性がある。","en":"Attackers used a login vulnerability in Smaregi's e-commerce SaaS admin screen to reach four client companies' environments, possibly exposing customer, order and admin data."},"sources":[{"title":"スマレジEC 不正アクセスに関するお知らせ","publisher":"スマレジ","date":"2026-09-25","url":"https://ec.smaregi.jp/b2b/news/2026925-2/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"スマレジ","en":"Smaregi"},"group":"access"},{"id":"e7f2fa3e78","date":"2026-09-25","occurred":null,"disclosed":"2026-09-25","org":{"ja":"タイムズモビリティ株式会社（タイムズカー／パーク24グループ）","en":"Times Mobility Co., Ltd. (Times Car; Park24 group)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":6600000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"タイムズカーのWebシステムに不正アクセスがあり、退会者等を含む約660万アカウントの情報が取得され、うち約160万件で運転免許証画像等の本人確認書類が漏えいした。","en":"Attackers got into Times Car's web system and took data on about 6.6 million accounts, including former members. About 1.6 million of those accounts also had ID-document images, such as driver's licences, leaked."},"sources":[{"title":"タイムズカーWebサイトへの不正アクセスによる個人情報漏えいの可能性について（第一報）","publisher":"タイムズカー","date":"2026-09-25","url":"https://share.timescar.jp/news/2026/0925/1814.html"},{"title":"タイムズカーWebシステムへの不正アクセス（第3報）","publisher":"パーク24","date":"2026-09-29","url":"https://www.park24.co.jp/news/2026/09/20260929-1.html"},{"title":"タイムズカーで不正アクセス 「退会済み」含む約660万件の情報が流出","publisher":"ITmedia @IT","date":"2026-09-30","url":"https://atmarkit.itmedia.co.jp/ait/articles/2609/30/news038.html"},{"title":"タイムズカーの情報漏洩、免許証など本人確認書類流出は160万件","publisher":"Impress Watch","date":"2026-09-29","url":"https://www.watch.impress.co.jp/docs/news/2144279.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"タイムズカー","en":"Times Car"},"group":"access"},{"id":"10be0838f6","date":"2026-09-25","occurred":"2026-09-24","disclosed":"2026-09-25","org":{"ja":"東洋紡せんい株式会社（従業員のメールアカウント）","en":"Toyobo Textile Co. (employee e-mail account)"},"sector":"manufacturing","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"従業員のメールアカウントを乗っ取られ、社内外へPDF付きのフィッシングメール約1,500件を送信","en":"Employee e-mail account taken over; about 1,500 phishing e-mails with a PDF lure sent to internal and external contacts"},"actor":null,"summary":{"ja":"東洋紡グループの東洋紡せんいで従業員のメールアカウントが不正アクセスを受け、社内外の関係者に認証情報を狙うフィッシングメール約1,500件が送信された。基幹・業務システムへの不正アクセスは確認されていない。","en":"An employee e-mail account at Toyobo group company Toyobo Textile was taken over and used to send about 1,500 credential-phishing e-mails to internal and external contacts. No access to core or business systems was found."},"sources":[{"title":"当社グループ会社メールアカウントへの不正アクセスおよび不審メール送信について（お詫び）","publisher":"東洋紡","date":"2026-09-25","url":"https://www.toyobo.co.jp/system/files/News_Release/202609/press_20260925_3J.pdf"},{"title":"東洋紡せんいのメールアカウントに不正アクセス、約1,500件の不審メール送信","publisher":"ScanNetSecurity","date":"2026-10-15","url":"https://scan.netsecurity.ne.jp/article/2026/10/15/56462.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"東洋紡せんい","en":"Toyobo Textile Co."},"group":"other"},{"id":"126fc9dac3","date":"2026-09-25","occurred":null,"disclosed":"2026-09-25","org":{"ja":"LEGOLAND Japan合同会社（レゴランド・ジャパン・ホテル／予約基盤Amadeus）","en":"LEGOLAND Japan LLC (LEGOLAND Japan Hotel; Amadeus booking platform)"},"sector":"services","type":"supply_chain","via_vendor":true,"records":1557,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"オンライン予約プラットフォームを運営するAmadeus IT Group社での不正アクセス","en":"Unauthorized access at booking-platform operator Amadeus IT Group"},"actor":null,"summary":{"ja":"レゴランド・ジャパン・ホテルの公式予約サイトが使う予約プラットフォームの運営元Amadeus社で不正アクセスがあり、予約1,557件分の氏名・メールアドレス・電話番号が影響を受けた可能性がある。決済情報やパスポート情報へのアクセスは確認されていない。","en":"Amadeus, which runs the booking platform behind LEGOLAND Japan Hotel's official site, reported unauthorized access to contact details (name, e-mail, phone) in up to 1,557 bookings. No access to payment or passport data was found."},"sources":[{"title":"ホテルの予約プラットフォームに対する不正アクセスについてのお詫びとお知らせ","publisher":"LEGOLAND Japan","date":"2026-09-25","url":"https://www.legoland.jp/operation/news/news-release/news20260925/"},{"title":"レゴランド・ジャパン・ホテルが利用するオンライン予約プラットフォームに不正アクセス","publisher":"ScanNetSecurity","date":"2026-10-15","url":"https://scan.netsecurity.ne.jp/article/2026/10/15/56460.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"レゴランド・ジャパン・ホテル","en":"LEGOLAND Japan Hotel"},"group":"access"},{"id":"c7585e713d","date":"2026-09-26","occurred":null,"disclosed":"2026-09-26","org":{"ja":"京王電鉄（グループ会社サーバー）","en":"Keio Corporation (group servers)"},"sector":"logistics_transport","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"グループ会社の一部で業務システムに支障（問い合わせフォームの内容が確認できないなど）。電車の運行は影響なし","en":"Business systems of some group companies disrupted (e.g. inquiry form contents unverifiable); trains unaffected"},"vector":null,"actor":null,"summary":{"ja":"9月26日未明、京王グループのサーバーがランサムウェア攻撃を受け、一部グループ会社の業務システムに障害が出た。鉄道運行への影響はなく、情報漏えいの有無は調査中とされた。","en":"Keio group servers were hit by ransomware early on 26 September, disrupting business systems at some group companies. Train operations were not affected; whether data leaked was still under investigation."},"sources":[{"title":"ランサムウェア攻撃によるシステム障害に関するお知らせとお詫び","publisher":"京王電鉄","date":"2026-09-26","url":"https://www.keio.co.jp/news/update/announce/nr260926v13404/"},{"title":"京王電鉄にランサムウェア攻撃","publisher":"ScanNetSecurity","date":"2026-09-30","url":"https://scan.netsecurity.ne.jp/article/2026/09/30/56345.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"京王電鉄","en":"Keio Corporation"},"group":"ransomware"},{"id":"4f426eee9d","date":"2026-09-27","occurred":"2026-09-26","disclosed":"2026-09-27","org":{"ja":"スターツ出版株式会社（オズモール）","en":"Starts Publishing Corp. (OZmall)"},"sector":"media_entertainment","type":"unauthorized_access","via_vendor":false,"records":442779,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"影響のあるページを一時停止し、修正後に復旧","en":"Affected pages temporarily taken offline, then restored after a fix"},"vector":{"ja":"海外からの大量アクセス（手口は非公表）","en":"Mass access from overseas (method not disclosed)"},"actor":null,"summary":{"ja":"予約サイトオズモールに海外から大量の不正アクセスがあり、会員のメールアドレスと一部の氏名・都道府県が閲覧された可能性がある。","en":"A burst of unauthorized traffic from overseas hit the OZmall booking site, possibly exposing member emails and some names and prefectures."},"sources":[{"title":"オズモールへの不正アクセスに関するお知らせ","publisher":"スターツ出版","date":"2026-09-27","url":"https://starts-pub.jp/info20260927"},{"title":"スターツ出版「オズモール」に不正アクセス、会員のメールアドレス 最大447,610名分が漏えいした可能性","publisher":"ScanNetSecurity","date":"2026-10-01","url":"https://scan.netsecurity.ne.jp/article/2026/10/01/56359.html"},{"title":"国内の個人情報漏洩・漏洩の恐れ、2026年9〜10月の主要案件で延べ1億件相当超","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-10-13","url":"https://rocket-boys.co.jp/security-measures-lab/2026-sep-oct-japan-data-breach-exposure-scale/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"オズモール","en":"OZmall"},"group":"access"},{"id":"d0fa93e21c","date":"2026-09-27","occurred":null,"disclosed":"2026-09-27","org":{"ja":"東京地下鉄株式会社（メトポ会員向けサービス）","en":"Tokyo Metro Co., Ltd. (Metro Point Club member service)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":59000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"メトポ会員向けサービスで、配信停止中のメールアドレスを格納したサーバに不正アクセスがあり、約5.9万件のメールアドレスが取得された可能性がある。","en":"Attackers accessed a server holding suppressed (undeliverable) Metro Point member emails, possibly taking about 59,000 addresses."},"sources":[{"title":"メトポ会員向けサービスにおける不正アクセス事案の発生について（お詫び）","publisher":"東京地下鉄","date":"2026-09-27","url":"https://www.tokyometro.jp/info/files/9172e2efa7222d15f8d4f601b6385457.pdf"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"東京地下鉄","en":"Tokyo Metro"},"group":"access"},{"id":"d0c74e9304","date":"2026-09-28","occurred":"2026-08-25","disclosed":"2026-09-28","org":{"ja":"サンポー食品株式会社","en":"Sanpo Foods Co., Ltd."},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"検知した2026年8月25日にサイトを停止","en":"Website taken offline on detection (2026-08-25)"},"vector":{"ja":"サイトのWebシステムの脆弱性を突かれた可能性（会社の見解）","en":"Likely exploitation of a vulnerability in the website's web system (company assessment)"},"actor":null,"summary":{"ja":"サンポー食品の公式サイトが不正アクセスを受け、管理者権限を奪われて改ざんされた。現時点で個人情報の漏えいは確認されていない。","en":"Sanpo Foods' website was breached: the attacker took administrator rights and defaced the site. No personal-data leak has been confirmed."},"sources":[{"title":"弊社ウェブサイトへの不正アクセスに関するお詫びとご報告","publisher":"サンポー食品株式会社","date":"2026-09-28","url":"https://sanpofoods.co.jp/news/archives/1658/"},{"title":"サンポー食品のWebサイトに不正アクセス 管理者権限取得とサイト改ざんを確認、個人情報漏えいは確認されず","publisher":"Rocket Boys (Security Measures Lab)","date":"2026-09-28","url":"https://rocket-boys.co.jp/?p=41728"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"サンポー食品","en":"Sanpo Foods"},"group":"access"},{"id":"61f436406f","date":"2026-09-28","occurred":"2026-09-09","disclosed":"2026-09-28","org":{"ja":"集英社","en":"Shueisha Inc."},"sector":"media_entertainment","type":"unauthorized_access","via_vendor":false,"records":2835,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"CMSの設定不備からAPI認証情報を狙われ、攻撃者が特権アカウントを作成してAPIリクエストを繰り返し送信","en":"Attack on API credentials via a CMS configuration flaw; attacker created a privileged account and sent repeated API requests"},"actor":null,"summary":{"ja":"ブロガー管理システム「HAPPY PLUS COMMUNITY」が不正アクセスを受け、登録ブロガー2,835人の個人情報などが漏えいした。CMSの設定不備を突かれて特権アカウントが作られた。","en":"Shueisha's blogger-management system HAPPY PLUS COMMUNITY was breached and data on 2,835 registered bloggers leaked. The attacker exploited a CMS misconfiguration to create a privileged account."},"sources":[{"title":"「HAPPY PLUS COMMUNITY」への不正アクセスによる個人情報漏洩のお詫びとお知らせ","publisher":"集英社","date":"2026-09-28","url":"https://www.shueisha.co.jp/wp-content/uploads/2026/09/Shueisha20260928-1.pdf"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"集英社","en":"Shueisha"},"group":"access"},{"id":"d51cea1e69","date":"2026-09-28","occurred":"2026-09-16","disclosed":"2026-09-28","org":{"ja":"フクビ化学工業株式会社","en":"Fukuvi Chemical Industry Co., Ltd."},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"英語サイトのサーバーを2026年9月16日に停止。全データと定期ジョブ設定を削除して再構築中","en":"English-site servers (fukuvi-jp.com, its subdomains, fukuvikenzai.com) taken offline 2026-09-16; all data and scheduled-job settings being deleted and rebuilt"},"vector":null,"actor":null,"summary":{"ja":"英語版サイトの一部サーバーが外部から不正アクセスを受け、9月16日に対象サイトを停止した。侵入経路やデータ流出の有無は調査中。","en":"Some servers hosting Fukuvi's English-language websites were accessed from outside, and the sites were taken down on 16 Sep. How the attacker got in and whether data left is still under investigation."},"sources":[{"title":"第三者の不正アクセスによるシステム障害に関するお知らせ","publisher":"フクビ化学工業株式会社","date":"2026-09-28","url":"https://www.fukuvi.co.jp/application/files/1417/9057/7105/Di_San_Zhe_noBu_Zheng_akusesuniyorushisutemuZhang_Hai_niGuan_suruoZhi_rase.pdf"},{"title":"フクビ化学工業の英語版Webサイトに不正アクセス 一部サーバー停止、データ外部流出の可能性を調査","publisher":"Rocket Boys (Security Measures Lab)","date":"2026-09-28","url":"https://rocket-boys.co.jp/?p=41708"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"フクビ化学工業","en":"Fukuvi Chemical Industry"},"group":"access"},{"id":"07c4781fd4","date":"2026-09-28","occurred":"2026-09-21","disclosed":"2026-09-28","org":{"ja":"手間いらず（宿泊予約管理システムTEMAIRAZU）","en":"Temairazu (hotel booking management system TEMAIRAZU)"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":4450000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"9月24日10:58〜21:48にシステムの一部を休止","en":"Part of the system paused 24 Sep 10:58–21:48"},"vector":{"ja":"予約管理システムへの不正アクセス（手口は非公表）。宿泊客に不審なメッセージを送信","en":"Unauthorized access to the reservation management system (method not disclosed); suspicious messages sent to guests"},"actor":null,"summary":{"ja":"宿泊施設向け予約管理システムが不正アクセスを受け、宿泊予約者最大約445万人の氏名・電話番号・メールアドレスや予約内容が閲覧・取得された可能性がある。宿泊施設から予約者宛の不審メッセージの連絡で発覚した。","en":"The TEMAIRAZU booking-management system used by hotels was breached; names, phone numbers, emails and booking details of up to about 4.45M guests may have been viewed or taken. It came to light when hotels reported suspicious messages sent to guests."},"sources":[{"title":"不審なメッセージおよび当社システムへの不正アクセスに関するお詫びとお知らせ","publisher":"手間いらず","date":"2026-09-28","url":"https://www.temairazu.co.jp/pdf/1206/news-update"},{"title":"当社システムへの不正アクセスに関する調査状況および対応について","publisher":"手間いらず","date":"2026-10-09","url":"https://www.temairazu.co.jp/pdf/1212/ir-news"},{"title":"【解説】手間いらず・バイトル・JR九州など不正アクセス14件、10月8〜10日の公表を整理","publisher":"innovaTopia","date":"2026-10-12","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118817/"},{"title":"手間いらず「TEMAIRAZU」の不正アクセスによるサイバー攻撃 のまとめ","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-10-01","url":"https://rocket-boys.co.jp/security-measures-lab/temairazu-incident-affected-hotels-list/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"手間いらず（宿泊予約）","en":"Temairazu (hotel bookings)"},"group":"access"},{"id":"a30dd75b92","date":"2026-09-28","occurred":"2026-09-26","disclosed":"2026-09-28","org":{"ja":"コロンビア珈琲株式会社（極上珈琲 生豆本舗）","en":"Colombia Coffee Co. (Gokujo Coffee Namamame Honpo)"},"sector":"retail_food","type":"other","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"9月26日23時頃から27日13時15分頃まで通販サイトが表示できない状態","en":"Online shop unreachable from about 23:00 on 26 Sep to 13:15 on 27 Sep"},"vector":{"ja":"国内100以上の回線を経由した約1万件の自動SQLインジェクション攻撃。商品検索に送り込まれた文字列でデータベースが極端に重い処理となった","en":"About 10,000 automated SQL injection attempts via 100+ domestic lines; one heavy search query stalled the database"},"actor":null,"summary":{"ja":"コロンビア珈琲の通販サイト「極上珈琲 生豆本舗」が、9月25日から続いた自動ツールによるSQLインジェクション攻撃で約14時間表示できなくなった。攻撃はいずれも拒否・無効化され、顧客情報や注文情報の取得の形跡はないとしている。","en":"Colombia Coffee's online shop \"Gokujo Coffee Namamame Honpo\" went down for about 14 hours under an automated SQL injection campaign that began on 25 Sep. The company says every attempt was rejected or neutralised and found no sign that customer or order data was taken."},"sources":[{"title":"サイト障害のお詫びと復旧のお知らせ","publisher":"コロンビア珈琲（極上珈琲 生豆本舗）","date":"2026-09-28","url":"https://www.namamame.jp/index.php?main_page=news_manager&pages_id=995"},{"title":"「極上珈琲 生豆本舗」に SQL インジェクション攻撃、サイトが正常に表示されない障害が発生","publisher":"ScanNetSecurity","date":"2026-10-16","url":"https://scan.netsecurity.ne.jp/article/2026/10/16/56476.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"極上珈琲 生豆本舗","en":"Namamame Honpo coffee shop"},"group":"other"},{"id":"fd4aae87bb","date":"2026-09-29","occurred":"2026-09-01","disclosed":"2026-09-29","org":{"ja":"TOPPAN株式会社（損害保険ジャパン受託業務）","en":"TOPPAN Inc. (Sompo Japan outsourcing)"},"sector":"services","type":"data_leak","via_vendor":false,"records":177426,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"送信に使ったファイル転送サービスを停止","en":"File-transfer delivery used for the send was stopped"},"vector":{"ja":"手作業のドラッグ＆ドロップのミスで、損保ジャパンのZIPを他社のZIPに格納。送信前の確認なし","en":"Manual drag-and-drop error put Sompo Japan's ZIP file inside another insurer's ZIP; no check before sending"},"actor":null,"summary":{"ja":"TOPPANが受託する保険料控除証明書発行サービスで、損保ジャパン契約者177,426名分のデータを他の損保1社へ誤送付した。原因は手作業ミスで、不正アクセスではない。","en":"While running an insurance-deduction certificate service, TOPPAN sent data on 177,426 Sompo Japan policyholders to another insurer by mistake. The cause was manual error, not a cyberattack."},"sources":[{"title":"当社受託「保険料控除証明書 発行サービス」運用業務におけるデータ誤送付について","publisher":"TOPPAN株式会社","date":"2026-09-29","url":"https://www.holdings.toppan.com/ja/info/toppan_info20260929.pdf"},{"title":"TOPPAN、損保ジャパンの契約者情報 約17万7千人分を別の保険会社へ誤送付か","publisher":"Rocket Boys (Security Measures Lab)","date":"2026-09-29","url":"https://rocket-boys.co.jp/?p=41816"}],"confidence":"high","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"攻撃による漏えいの件数ではない（設定ミス・人為的ミス・件数の集計値）ため合計に含めない","en":"not added to totals: not records leaked by an attack (misconfiguration, human error, or a count of cases)"},"short":{"ja":"TOPPAN","en":"TOPPAN"},"group":"access"},{"id":"77f4cf1448","date":"2026-09-29","occurred":"2026-09-24","disclosed":"2026-09-29","org":{"ja":"株式会社セイコーマート","en":"Seicomart Co., Ltd."},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":570000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"9月28日20:00から新規入会、会員情報・カード変更、退会、マイページログインを停止","en":"Since 9/28 20:00: new sign-ups, profile and card changes, cancellations and My Page login stopped"},"vector":{"ja":"セイコーマートアプリのサーバー経由で会員サーバーに到達された","en":"Attacker reached the member server through the Seicomart app's server"},"actor":null,"summary":{"ja":"セイコーマートアプリのサーバ経由で会員サーバに不正アクセスがあり、約57万アカウントの氏名・住所・電話番号等が漏えいした可能性がある。パスワードは漏えいしていない。","en":"Attackers went through the Seicomart app server into the member server, possibly exposing names, addresses and phone numbers for about 570,000 accounts. Passwords were not leaked."},"sources":[{"title":"「セイコーマートアプリ」への不正アクセスによる個人情報流出の可能性に関するお詫びとお知らせ","publisher":"セイコーマート","date":"2026-09-29","url":"https://www.secoma.co.jp/images/top/202609290017.pdf"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"セイコーマート","en":"Seicomart"},"group":"access"},{"id":"ba66d56a82","date":"2026-09-29","occurred":"2026-09-25","disclosed":"2026-09-29","org":{"ja":"日本郵政株式会社・日本郵便株式会社（郵便局アプリ／ゆうID）","en":"Japan Post Holdings / Japan Post (Post Office app, Yu ID)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":69,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"9月25日22:30から「ゆうID」と郵便局アプリを緊急メンテナンス。9月26日に再開","en":"Yu ID and Post Office app under emergency maintenance from 9/25 22:30; resumed 9/26"},"vector":null,"actor":null,"summary":{"ja":"郵便局アプリへの不正アクセスで、ゆうID会員情報や送り状情報など69件（19名分）が不正取得された。","en":"Unauthorized access to the Post Office app led to theft of 69 items of Yu ID member, address-book and shipping-label data, covering 19 people."},"sources":[{"title":"郵便局アプリへの不正アクセスについて","publisher":"日本郵政・日本郵便","date":"2026-09-29","url":"https://files.japanpost.jp/assets/34d9d11432734cfaa759e78fe395b688/c6b030844cf0412ab0d48f8bae7b3a75/20260929_01_01.pdf"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"日本郵政・日本郵便","en":"Japan Post Holdings / Japan Post"},"group":"access"},{"id":"a6a5799457","date":"2026-09-29","occurred":"2026-09-28","disclosed":"2026-09-29","org":{"ja":"株式会社ユニリタ","en":"UNIRITA Inc."},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"報告なし","en":"None reported"},"vector":null,"actor":"Everest (claimed per rocket-boys; not confirmed by the company)","summary":{"ja":"リークサイトで機密情報窃取の主張を確認し、社内の文書管理システムへの不正アクセスと情報窃取を確認した。業務への影響はない。","en":"After spotting a leak-site claim, the software vendor confirmed unauthorized access to and data theft from an internal document-management system. Operations were not affected."},"sources":[{"title":"当社における情報流出の可能性に関するお知らせ（第1報）","publisher":"ユニリタ","date":"2026-09-29","url":"https://www.unirita.co.jp/news/2026/media_20260929.html"},{"title":"2026年9月 ランサムウェア被害事例まとめ","publisher":"rocket-boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/security-measures-lab/2026-09-ransomware-cases-summary/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ユニリタ","en":"UNIRITA"},"group":"access"},{"id":"4c6da9f4b6","date":"2026-09-29","occurred":"2026-09-28","disclosed":"2026-09-29","org":{"ja":"ヤマト運輸株式会社（クロネコ代金後払いサービス）","en":"Yamato Transport Co., Ltd. (Kuroneko cash-on-delivery / deferred payment service)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":5260000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"9月28日22:28にサービスを停止。10月9日の第3報で再開を発表","en":"Service stopped 9/28 at 22:28; resumption announced in the 10/9 third report"},"vector":null,"actor":null,"summary":{"ja":"クロネコ代金後払いサービスに不正アクセスがあり、購入者情報約526万件などが不正に持ち出された。","en":"Attackers broke into Yamato's deferred-payment service and took about 5.26 million purchaser records, plus delivery and merchant data."},"sources":[{"title":"クロネコ代金後払いサービスへの不正アクセスについて（第4報）","publisher":"ヤマト運輸","date":"2026-10-16","url":"https://www.yamato-hd.co.jp/important/info_260929_1.html"},{"title":"クロネコ代金後払いサービスへの不正アクセス","publisher":"rocket-boys セキュリティ対策Lab","url":"https://rocket-boys.co.jp/security-measures-lab/kuroneko-atobarai-unauthorized-access-confirmed-2026-09-29/"},{"title":"ヤマト運輸 個人情報530万件余の外部流出を確認","publisher":"NHK","date":"2026-10-16","url":"https://news.web.nhk/newsweb/na/nd-20261016de60395"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ヤマト運輸（代金後払い）","en":"Yamato Transport (pay-later)"},"group":"access"},{"id":"b982e9d599","date":"2026-09-29","occurred":null,"disclosed":"2026-09-29","org":{"ja":"株式会社イープラス","en":"eplus inc."},"sector":"media_entertainment","type":"unauthorized_access","via_vendor":false,"records":1463,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"中止・延期公演の払戻し情報を管理する電子チケット「スマチケ」関連システムに不正アクセスがあり、払戻し申請者1,463名の情報が漏えいした可能性がある。","en":"Unauthorized access to e+'s refund-management system for cancelled or postponed events may have exposed data on 1,463 refund applicants."},"sources":[{"title":"イープラスのスマチケ払戻し情報管理システムに不正アクセス","publisher":"ScanNetSecurity","date":"2026-10-02","url":"https://scan.netsecurity.ne.jp/article/2026/10/02/56372.html"},{"title":"2026年9月 サイバー攻撃の被害 事例 まとめ","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-10-01","url":"https://rocket-boys.co.jp/security-measures-lab/2026-09-latest-cyber-attack-cases/"}],"confidence":"medium","wave":true,"landmark":false,"short":{"ja":"イープラス","en":"eplus inc."},"group":"access"},{"id":"38f46681a4","date":"2026-09-30","occurred":"2026-07-30","disclosed":"2026-09-30","org":{"ja":"株式会社ベネフィット・ワン","en":"Benefit One Inc."},"sector":"services","type":"misconfiguration","via_vendor":false,"records":13460,"affected_orgs":2322,"cost_jpy":null,"outage":null,"vector":{"ja":"アンケート結果ダウンロード機能の条件設定ミス。2025年6月のシステム変更で混入","en":"Program condition-setting error in the survey-results download function, introduced by a June 2025 system change"},"actor":null,"summary":{"ja":"福利厚生サービスのアンケート結果ダウンロード機能の設定不備で、他の企業・団体の従業員情報が担当者1名に表示されていた。対象は2,322企業・団体の13,460名。","en":"A settings defect in Benefit One's survey-download feature showed one client administrator employee data belonging to other client organisations. 13,460 people across 2,322 organisations were affected."},"sources":[{"title":"当社システムにおける個人情報漏えいに関するお知らせとお詫び","publisher":"ベネフィット・ワン","date":"2026-09-30","url":"https://corp.benefit-one.co.jp/company/news/news/2026/20260930/20260930.pdf"}],"confidence":"high","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"攻撃による漏えいの件数ではない（設定ミス・人為的ミス・件数の集計値）ため合計に含めない","en":"not added to totals: not records leaked by an attack (misconfiguration, human error, or a count of cases)"},"short":{"ja":"ベネフィット・ワン","en":"Benefit One"},"group":"access"},{"id":"a1db21def2","date":"2026-09-30","occurred":"2026-09-25","disclosed":"2026-09-30","org":{"ja":"株式会社ジー・プラン（Gポイント）","en":"G-Plan Inc. (G-Point)"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":70000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"9月25日にシステムを停止。Gポイントのサービスは停止中で再開日未定","en":"System shut down on 9/25; G-Point services suspended with no restart date"},"vector":null,"actor":null,"summary":{"ja":"ポイント交換サービスGポイントに外部から不正アクセスがあり、最大約7万件の会員識別子が漏えいした可能性がある。","en":"Unauthorized access to the G-Point points-exchange service may have exposed up to about 70,000 member identifiers."},"sources":[{"title":"Gポイントへの不正アクセスについて","publisher":"ジー・プラン","date":"2026-09-30","url":"https://www.g-plan.net/news/details/20260930.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ジー・プラン","en":"G-Plan"},"group":"access"},{"id":"00e9005109","date":"2026-09-30","occurred":"2026-09-26","disclosed":"2026-09-30","org":{"ja":"学校法人修道学園（広島修道大学ほか）","en":"Shudo Gakuen (Hiroshima Shudo University and affiliated schools)"},"sector":"education","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"学園管理のサーバ1台に不正アクセスがあり、取引先の口座情報や教職員・一部学生の氏名・住所・口座情報が漏えいしたおそれがある。","en":"Unauthorized access to one server run by the school corporation may have exposed bank details of business partners, plus names, addresses and bank details of staff and some students."},"sources":[{"title":"本学園サーバへの不正アクセスについて","publisher":"学校法人修道学園","date":"2026-09-30","url":"https://www.shudo-u.ac.jp/gakuen/information/b53fil000000008q.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"修道学園","en":"Shudo Gakuen"},"group":"access"},{"id":"6eb43c3f8b","date":"2026-09-30","occurred":null,"disclosed":"2026-09-30","org":{"ja":"関西国際大学","en":"Kansai University of International Studies"},"sector":"education","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"学内システムへのインターネット接続を遮断し、一部システムが利用不可","en":"Internet connection to campus systems cut, making some systems unavailable"},"vector":null,"actor":null,"summary":{"ja":"一部の学内システムに第三者による不正アクセスがあり、学内システムのインターネット接続を遮断した。","en":"A third party accessed some campus systems, and the university cut their internet connection."},"sources":[{"title":"本学システムへの不正アクセスについて","publisher":"関西国際大学","date":"2026-09-30","url":"https://www.kuins.ac.jp/news/2026/09/post_1448.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"関西国際大学","en":"Kansai University of International Studies"},"group":"access"},{"id":"27efd19c6a","date":"2026-09-30","occurred":null,"disclosed":"2026-09-30","org":{"ja":"佐川急便株式会社（お荷物問い合わせサービス）","en":"Sagawa Express Co., Ltd. (parcel-tracking web service)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"荷物追跡とそのAPI、集荷依頼、配達変更など9つのWebサービスを停止。集荷・配達は通常どおり","en":"Nine web services stopped, including parcel tracking and its API, pickup requests and delivery changes; pickup and delivery continued normally"},"vector":null,"actor":null,"summary":{"ja":"お荷物問い合わせサービスへの不正アクセスで、約100日分の荷物の送り主・届け先の氏名・住所・電話番号等が流出した可能性がある。","en":"Unauthorized access to Sagawa's parcel-tracking service may have exposed sender and recipient names, addresses and phone numbers covering about 100 days of shipments."},"sources":[{"title":"佐川急便、2026年9月30日 不正アクセスによる個人情報流出の可能性を発表【第1報〜第3報】","publisher":"ECのミカタ","date":"2026-10-05","url":"https://ecnomikata.com/ecnews/51852/"},{"title":"セキュリティインシデント 2026","publisher":"westeria","url":"https://westeria.jp/security-incidents/2026/"},{"title":"佐川急便「お荷物問い合わせサービス」不正アクセスにより情報流出の可能性、ウェブの荷物問い合わせなどを停止中","publisher":"INTERNET Watch","date":"2026-10-02","url":"https://internet.watch.impress.co.jp/docs/news/2145343.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"佐川急便","en":"Sagawa Express"},"group":"access"},{"id":"09eb94abbb","date":"2026-10-01","occurred":"2026-09-25","disclosed":"2026-10-01","org":{"ja":"国立研究開発法人日本原子力研究開発機構（JRR-3研究支援サイト）","en":"Japan Atomic Energy Agency (JRR-3 research support site)"},"sector":"government","type":"unauthorized_access","via_vendor":false,"records":175,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"9月25日から研究支援サイトへの外部からのアクセスを停止","en":"Research support site closed to outside access from 25 Sep"},"vector":{"ja":"契約クラウド基盤上の研究支援サイトから2,419ファイルを不正にダウンロード","en":"Unauthorized download of 2,419 files from a research support site on a contracted cloud platform"},"actor":null,"summary":{"ja":"日本原子力研究開発機構が研究用原子炉JRR-3の外部利用者向けに運用する研究支援サイトから2,419ファイルが不正にダウンロードされ、うち367ファイル（175人分）の個人情報が漏えいした。顔写真付き公的身分証の画像200件、特殊健康診断結果146件などが含まれる。","en":"2,419 files were downloaded without authorization from JAEA's support site for outside users of the JRR-3 research reactor; 367 of them, covering 175 people, held personal data, including 200 photo-ID images and 146 radiation-work health check results."},"sources":[{"title":"不正アクセスによる情報漏えいについて","publisher":"日本原子力研究開発機構","date":"2026-10-01","url":"https://www.jaea.go.jp/02/press2026/p26100105/"},{"title":"日本原子力研究開発機構が運用している研究支援サイトに不正アクセス、顔写真付公的身分証明証 200 件が漏えい","publisher":"ScanNetSecurity","date":"2026-10-14","url":"https://scan.netsecurity.ne.jp/article/2026/10/14/56447.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"日本原子力研究開発機構","en":"Japan Atomic Energy Agency"},"group":"access"},{"id":"37a2985749","date":"2026-10-02","occurred":"2026-05-14","disclosed":"2026-10-02","org":{"ja":"ムーンスター（通販サイト）","en":"Moonstar (online stores)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":593000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"システムサーバーに不正ログイン（詳細は非公表）","en":"Unauthorized login to a system server (details withheld)"},"actor":null,"summary":{"ja":"システムサーバーへの不正ログインにより、楽天などの通販サイト利用者最大59万3000人の氏名・住所・注文履歴などが流出した可能性がある。なりすましメールの報告で発覚した。","en":"An unauthorized login to Moonstar's system server may have leaked up to 593,000 online-store customers' names, addresses and order history; it surfaced after customers reported spoofed emails."},"sources":[{"title":"当社システムサーバーへの不正アクセスに関するお知らせ（第3報）","publisher":"ムーンスター","date":"2026-10-15","url":"https://www.moonstar.co.jp/information/2026/10/gg.html"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"ムーンスター","en":"Moonstar"},"group":"access"},{"id":"834317b8a2","date":"2026-10-02","occurred":"2026-09-09","disclosed":"2026-10-02","org":{"ja":"エネルギー・金属鉱物資源機構（JOGMEC）","en":"JOGMEC (Japan Organization for Metals and Energy Security)"},"sector":"government","type":"unauthorized_access","via_vendor":false,"records":8500,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"情報システムへの外部からの不正アクセス（詳細は非公表）","en":"Unauthorized external access to an information system (details not disclosed)"},"actor":null,"summary":{"ja":"外部からの情報提供を受けた調査で、JOGMECの情報システムへの不正アクセスにより約8500件のメールアドレスが漏えいした可能性が判明した。","en":"After a tip-off from an outside organisation, JOGMEC found that about 8,500 email addresses (about 1,100 staff and 7,400 others) may have leaked via unauthorized access to an information system."},"sources":[{"title":"不正アクセスによる個人情報の漏えいの可能性に関するお詫びとご報告","publisher":"JOGMEC","date":"2026-10-02","url":"https://www.jogmec.go.jp/news/information/information_00706.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"エネルギー・金属鉱物資源機構","en":"JOGMEC"},"group":"access"},{"id":"680b42c40b","date":"2026-10-02","occurred":"2026-09-24","disclosed":"2026-10-02","org":{"ja":"第一ライフグループ／第一生命保険","en":"Dai-ichi Life Group / Dai-ichi Life Insurance"},"sector":"finance","type":"unauthorized_access","via_vendor":false,"records":120000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"両社が使う従業員向け人事システムが不正アクセスを受け、現役・退職者約12万人の従業員情報が閲覧・流出した可能性がある。顧客情報への不正アクセスは確認されていない。","en":"The two companies' employee HR system was breached; data on about 120,000 current and former staff may have been viewed and taken. No customer data access confirmed."},"sources":[{"title":"退職された皆さまへのお知らせ 当社の従業員向け人事システムへの不正アクセスについて","publisher":"第一ライフグループ／第一生命保険","date":"2026-10-02","url":"https://www.dai-ichi-life.co.jp/information/pdf/index_192.pdf"},{"title":"第一ライフグループと第一生命保険の人事システムに不正アクセス、約12万名の従業員情報が流出した可能性","publisher":"ScanNetSecurity","date":"2026-10-15","url":"https://scan.netsecurity.ne.jp/article/2026/10/15/56463.html"},{"title":"第一ライフに不正アクセス 12万人分の従業員情報が流出か","publisher":"NHK","date":"2026-10-03","url":"https://news.web.nhk/newsweb/na/nd-20261003de54037"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"第一ライフグループ／第一生命保険","en":"Dai-ichi Life Group / Dai-ichi Life Insurance"},"group":"access"},{"id":"4909ef3f67","date":"2026-10-02","occurred":"2026-09-25","disclosed":"2026-10-02","org":{"ja":"サミーネットワークス（777CON-PASS）","en":"Sammy Networks (777CON-PASS app)"},"sector":"media_entertainment","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"アプリのサーバーから利用者・ホールのデータを取得する不正なAPI型リクエスト","en":"Unauthorized API-style requests to retrieve user and hall data from the app server"},"actor":null,"summary":{"ja":"遊技場向け抽選アプリ777CON-PASSのサーバーに不正なリクエストが送られ、電話番号・生年月日・ニックネームなどが取得された可能性がある。件数は調査中。","en":"Unauthorized requests were sent to the 777CON-PASS lottery app server, possibly retrieving phone numbers, birth dates, nicknames and similar data. The number affected is under investigation."},"sources":[{"title":"777CON-PASS 不正アクセスに関する続報","publisher":"サミーネットワークス","date":"2026-10-02","url":"https://www.sammy-net.jp/news/2026/10/777con-pass-6.html"},{"title":"【解説】焼肉きんぐ・大和証券など不正アクセス11件、10月2〜5日の個人情報漏えいを整理","publisher":"innovaTopia","date":"2026-10-06","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118602/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"サミーネットワークス","en":"Sammy Networks"},"group":"access"},{"id":"2e92a0e514","date":"2026-10-02","occurred":null,"disclosed":"2026-10-02","org":{"ja":"大阪公立大学","en":"Osaka Metropolitan University"},"sector":"education","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"10月2〜8日は対面授業をすべて休講。約500台のサーバー停止で、メール、Web、教務、財務、人事、図書館システムが停止。10月9日に対面授業を再開","en":"All in-person classes cancelled 2–8 Oct; ~500 servers stopped; email, websites, academic, finance, HR and library systems down; in-person classes resumed 9 Oct"},"vector":null,"actor":null,"summary":{"ja":"10月2日未明に仮想化基盤が停止し、大学はランサムウェア攻撃と判断した。約500台のサーバーが止まり、対面授業は10月9日まで休講となった。個人情報流出の有無は調査中。","en":"The university's virtualisation platform failed early on 2 October in what it judged to be a ransomware attack. About 500 servers went down and in-person classes were suspended until 9 October; whether personal data leaked is under investigation."},"sources":[{"title":"システム障害に関する記者会見について","publisher":"大阪公立大学","date":"2026-10-06","url":"https://www.omu.moe/news/2026-10-06-7fb5a624.html"},{"title":"大阪公立大が対面授業再開 ランサム攻撃で障害続く（共同通信）","publisher":"熊本日日新聞","date":"2026-10-09","url":"https://kumanichi.com/articles/2044799"},{"title":"大阪公立大学、ランサムウェアによるサイバー攻撃の被害後 対面授業を10月9日再開","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-10-08","url":"https://rocket-boys.co.jp/?p=42984"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"大阪公立大学","en":"Osaka Metropolitan University"},"group":"ransomware"},{"id":"289d51a860","date":"2026-10-02","occurred":null,"disclosed":"2026-10-02","org":{"ja":"セーファーインターネット協会","en":"Safer Internet Association"},"sector":"other","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"さくらインターネットのレンタルサーバー環境への不正アクセス","en":"Unauthorized access to Sakura Internet rental-server environment"},"actor":null,"summary":{"ja":"さくらインターネットのレンタルサーバー環境への不正アクセスに関連し、通報窓口の氏名・メール・通報内容が影響を受けた可能性があると公表した。閲覧・取得は確認されていない。","en":"Linked to unauthorized access to Sakura Internet's rental-server environment, the association said names, emails and hotline report contents may have been affected; no viewing or theft confirmed."},"sources":[{"title":"【解説】焼肉きんぐ・大和証券など不正アクセス11件、10月2〜5日の個人情報漏えいを整理","publisher":"innovaTopia","date":"2026-10-06","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118602/"}],"confidence":"low","wave":false,"landmark":false,"short":{"ja":"セーファーインターネット協会","en":"Safer Internet Association"},"group":"access"},{"id":"98a7f6e05e","date":"2026-10-03","occurred":"2026-09-27","disclosed":"2026-10-03","org":{"ja":"アバハウスインターナショナル","en":"Abahouse International"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"社内システムに不正ログインされ、悪意あるプログラムを入れられて会員・EC注文のデータベースに到達","en":"Unauthorized login to internal systems, then a malicious program installed to reach member/EC order database"},"actor":null,"summary":{"ja":"社内システムへの不正ログインを起点に不正プログラムが実行され、会員情報やECの注文情報が流出した可能性がある。顧客に注文内容入りの不審な「返金」メールが届いて発覚した。","en":"An unauthorized login to internal systems led to a malicious program accessing member and online-order data. It was discovered when customers received suspicious 'refund' emails containing their order details."},"sources":[{"title":"不正アクセスに関するお詫びとお知らせ","publisher":"アバハウスインターナショナル","date":"2026-10-03","url":"https://abahouse.co.jp/news/2005/"},{"title":"【解説】焼肉きんぐ・大和証券など不正アクセス11件、10月2〜5日の個人情報漏えいを整理","publisher":"innovaTopia","date":"2026-10-06","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118602/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"アバハウスインターナショナル","en":"Abahouse International"},"group":"access"},{"id":"6ff1ebd7fb","date":"2026-10-04","occurred":"2026-09-30","disclosed":"2026-10-04","org":{"ja":"日本経済新聞社（社員のMicrosoft 365アカウント）","en":"Nikkei Inc. (employee Microsoft 365 account)"},"sector":"media_entertainment","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"社員のMicrosoft 365アカウントへの不正ログイン","en":"Unauthorized login to an employee's Microsoft 365 account"},"actor":null,"summary":{"ja":"社員のMicrosoft 365アカウントに第三者が不正ログインし、悪性サイトへ誘導するなりすましメール約9,000件が送られた。送信先の氏名やメールアドレスなどが漏えいしたとみられる。","en":"A third party logged into a Nikkei employee's Microsoft 365 account and sent about 9,000 spoofed emails linking to a malicious site. Recipients' names, addresses and some email content are believed leaked."},"sources":[{"title":"サイバー攻撃による情報漏洩、不審メールの送信について","publisher":"日本経済新聞社","date":"2026-10-04","url":"https://www.nikkei.co.jp/nikkeiinfo/news/information/1554.html"},{"title":"日本経済新聞社社員の「マイクロソフト365」のアカウントにサイバー攻撃、悪性サイトに誘導するメールを送信","publisher":"ScanNetSecurity","date":"2026-10-07","url":"https://scan.netsecurity.ne.jp/article/2026/10/07/56401.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日本経済新聞社","en":"Nikkei"},"group":"other"},{"id":"e8b14e653a","date":"2026-10-04","occurred":null,"disclosed":"2026-10-04","org":{"ja":"日本経済新聞社（社員のGoogle Workspaceアカウント）","en":"Nikkei Inc. (employee Google Workspace account)"},"sector":"media_entertainment","type":"account_takeover","via_vendor":false,"records":1646,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"社員のGoogle Workspaceアカウントへの不正ログイン（認証情報の入手方法は未記載）","en":"Unauthorized login to an employee's Google Workspace account (how credentials were obtained not stated)"},"actor":null,"summary":{"ja":"社員が業務で使うGoogle Workspaceのアカウントに7月下旬から外部の不正ログインがあり、社員や取引先など最大1646人のメールアドレスと氏名が漏えいした可能性がある。Googleからの通知で8月上旬に把握した。","en":"An outsider logged into a Nikkei employee's Google Workspace account from late July; names and emails of up to 1,646 staff and business contacts may have leaked. Nikkei learned of it from a Google notice in early August."},"sources":[{"title":"不正ログインによる情報漏洩について","publisher":"日本経済新聞社","date":"2026-10-04","url":"https://www.nikkei.co.jp/nikkeiinfo/news/information/1547.html"},{"title":"【解説】焼肉きんぐ・大和証券など不正アクセス11件、10月2〜5日の個人情報漏えいを整理","publisher":"innovaTopia","date":"2026-10-06","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118602/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日本経済新聞社","en":"Nikkei"},"group":"other"},{"id":"2d118706d6","date":"2026-10-04","occurred":"2026-09-30","disclosed":"2026-10-04","org":{"ja":"日経BP（従業員のメールアカウント）","en":"Nikkei Business Publications (employee e-mail account)"},"sector":"media_entertainment","type":"account_takeover","via_vendor":false,"records":26,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"日本経済新聞社社員のアドレスから届いたフィッシングメールで従業員の認証情報を窃取","en":"Employee credentials phished via an e-mail from a Nikkei employee address"},"actor":null,"summary":{"ja":"日経BPは、従業員のメールアカウントが不正アクセスを受け、送受信先26件の氏名とメールアドレスが漏えいした恐れがあると発表した。日本経済新聞社社員のアドレスから届いたフィッシングメールで認証情報を盗まれた。","en":"Nikkei BP said an employee's mailbox was accessed without authorization, possibly exposing names and e-mail addresses of 26 correspondents; the credentials were phished via an e-mail from a Nikkei employee's address."},"sources":[{"title":"メール不正アクセスによる個人情報の漏えいについて","publisher":"日経BP","date":"2026-10-04","url":"https://www.nikkeibp.co.jp/atcl/newsrelease/corp/100200417/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日経BP","en":"Nikkei Business Publications"},"group":"other"},{"id":"b6c1267db5","date":"2026-10-05","occurred":"2026-09-15","disclosed":"2026-10-05","org":{"ja":"大起水産","en":"Daiki Suisan Co., Ltd."},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":174933,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"回転寿司チェーン大起水産の公式アプリが不正アクセスを受け、登録者17万4,933人の個人情報が漏えいしたおそれがある。","en":"Sushi chain Daiki Suisan's official app was breached; personal data of 174,933 registered users may have leaked."},"sources":[{"title":"不正アクセスによる個人情報漏えいのおそれに関するお詫びとお知らせ","publisher":"大起水産","date":"2026-10-05","url":"https://daiki-suisan.co.jp/files/optionallink/00000164_file.pdf"},{"title":"大起水産 不正アクセスで約17万5000人分の個人情報漏えいか","publisher":"NHK","date":"2026-10-05","url":"https://news.web.nhk/newsweb/na/nd-20261005de54848"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"大起水産","en":"Daiki Suisan"},"group":"access"},{"id":"ee8fee1b58","date":"2026-10-05","occurred":"2026-10-02","disclosed":"2026-10-05","org":{"ja":"大和証券（委託先：スカラコミュニケーションズ）","en":"Daiwa Securities (contractor Scala Communications)"},"sector":"finance","type":"supply_chain","via_vendor":true,"records":110000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"委託先の問い合わせ管理サーバー（i-ask）への不正アクセス。スカラによると、管理サイトのログインを乗っ取られ、悪意あるプログラムを設置","en":"Unauthorized access to contractor's inquiry-management server (i-ask); per Scala: admin-site login takeover and planted malicious program"},"actor":null,"summary":{"ja":"問い合わせ管理に使う委託先スカラコミュニケーションズのサーバーが不正アクセスを受け、約11万人の氏名・メールアドレス・口座番号などが漏えいした可能性がある。大和証券自身のシステムへの侵入はない。","en":"The server of Daiwa's inquiry-management contractor Scala Communications was breached; names, emails and account numbers of about 110,000 customers may have leaked. Daiwa's own systems were not accessed."},"sources":[{"title":"外部委託先への不正アクセスによるお客様情報の漏洩の可能性について","publisher":"大和証券","date":"2026-10-05","url":"https://ssl4.eir-parts.net/doc/8601/tdnet/2891437/00.pdf"},{"title":"「自社システムは無事」でも顧客情報は漏れる 大和証券約11万人の情報に不正アクセス","publisher":"ITmedia @IT","date":"2026-10-07","url":"https://atmarkit.itmedia.co.jp/ait/spv/2610/07/news030.html"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"大和証券","en":"Daiwa Securities"},"group":"access"},{"id":"eaa6e0a52e","date":"2026-10-05","occurred":"2026-10-02","disclosed":"2026-10-05","org":{"ja":"GMOリサーチ&AI","en":"GMO Research & AI, Inc."},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":948498,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"2026年10月3日15:00からinfoQを全面停止。再開日未定","en":"infoQ fully suspended from 2026-10-03 15:00; no restart date"},"vector":{"ja":"サイトで使うソフトウェアの脆弱性を悪用","en":"Exploitation of a vulnerability in software used on the site"},"actor":null,"summary":{"ja":"アンケートサイト「infoQ」が脆弱性を突かれ、全会員分にあたる最大94万8,498件の個人情報が流出した。611件、計286万9,500円分のポイントがAmazonギフトコードに不正交換された。","en":"A software vulnerability on survey site infoQ was exploited and up to 948,498 member records (all members) leaked. 611 fraudulent point exchanges into Amazon gift codes totalled ¥2,869,500."},"sources":[{"title":"アンケートサイト「infoQ」への不正アクセスによる個人情報漏えいに関するお詫びとお知らせ","publisher":"GMOリサーチ&AI","date":"2026-10-05","url":"https://gmo-research.ai/pressroom/notice/notice-20261005"},{"title":"GMOリサーチ&AIのアンケート「infoQ」で不正アクセス、最大約95万件の個人情報が漏えいし、不正なポイント交換も","publisher":"INTERNET Watch","date":"2026-10-06","url":"https://internet.watch.impress.co.jp/docs/news/2145989.html"},{"title":"GMOグループ会社に不正アクセス 個人情報最大94万件余流出か","publisher":"NHK","date":"2026-10-06","url":"https://news.web.nhk/newsweb/na/nd-20261006de55007"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"GMOリサーチ&AI","en":"GMO Research & AI"},"group":"access"},{"id":"3d2e17a197","date":"2026-10-05","occurred":"2026-10-02","disclosed":"2026-10-05","org":{"ja":"物語コーポレーション（焼肉きんぐ公式アプリ）","en":"Monogatari Corporation (Yakiniku King app)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":10788963,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"アプリの会員管理システムへの第三者による不正アクセス（詳細は調査中）","en":"Third-party unauthorized access to the app's member-management system (details under investigation)"},"actor":null,"summary":{"ja":"焼肉きんぐ公式アプリの会員管理システムが不正アクセスを受け、登録者1080万余りのうち1078万8963件の会員番号・氏名・メール・電話番号が流出した。パスワードや決済情報は含まれない。","en":"The Yakiniku King app's member system was breached and 10,788,963 of about 10.81M members' records (member number, name, email, phone) leaked. Passwords and payment data were not included."},"sources":[{"title":"焼肉きんぐ公式アプリ会員情報の流出に関するお詫びとお知らせ","publisher":"物語コーポレーション","date":"2026-10-05","url":"https://www.monogatari.co.jp/news/261005_news/"},{"title":"【解説】焼肉きんぐ・大和証券など不正アクセス11件、10月2〜5日の個人情報漏えいを整理","publisher":"innovaTopia","date":"2026-10-06","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118602/"},{"title":"「焼肉きんぐ」運営会社 1000万件余のユーザー情報が漏えい","publisher":"NHK","date":"2026-10-05","url":"https://news.web.nhk/newsweb/na/nd-20261005de54760"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"焼肉きんぐ","en":"Yakiniku King"},"group":"access"},{"id":"79f2414834","date":"2026-10-06","occurred":"2026-10-02","disclosed":"2026-10-06","org":{"ja":"旭化成セラピューティクス（Pharma DIGITAL／委託先：医薬情報ネット）","en":"Asahi Kasei Therapeutics (Pharma DIGITAL; operator Iyaku Joho Net)"},"sector":"healthcare","type":"supply_chain","via_vendor":true,"records":514700,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"Pharma DIGITALサイトを停止","en":"Pharma DIGITAL site taken offline"},"vector":{"ja":"委託先が運営する医療従事者向けサイトの会員データベースへの不正アクセス","en":"Unauthorized access to the membership database of a contractor-operated healthcare-professional site"},"actor":null,"summary":{"ja":"委託先が運営する医療従事者向けサイトの会員データベースが不正アクセスを受け、医療従事者最大約51万4000名と従業員約700名の情報が漏えいした可能性がある。サイトは停止中。","en":"The member database of a contractor-run site for healthcare professionals was breached; data on up to about 514,000 HCPs and about 700 employees may have leaked. The site was taken offline."},"sources":[{"title":"Pharma DIGITALへの不正アクセスについて","publisher":"旭化成セラピューティクス","date":"2026-10-06","url":"https://www.asahi-kasei.co.jp/pharma/oshirase_20261006.html"},{"title":"【解説】旭化成・損保ジャパンなど不正アクセス5件、10月6〜7日の公表を整理","publisher":"innovaTopia","date":"2026-10-08","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118706/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"旭化成セラピューティクス","en":"Asahi Kasei Therapeutics"},"group":"access"},{"id":"417f5a6a8c","date":"2026-10-06","occurred":"2026-10-02","disclosed":"2026-10-06","org":{"ja":"シチズン時計（委託先i-ask）","en":"Citizen Watch (via i-ask)"},"sector":"manufacturing","type":"supply_chain","via_vendor":true,"records":100000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"委託先のスカラコミュニケーションズへの侵害","en":"Breach of contractor Scala Communications"},"actor":null,"summary":{"ja":"FAQシステムi-askへの不正アクセスにより、問い合わせ約10万件の氏名・住所・連絡先などが漏えいした可能性がある。","en":"Through the i-ask breach, about 100,000 customer inquiries (name, address, contact details) may have leaked."},"sources":[{"title":"【解説】i-ask・Commune・IDCFクラウドに不正アクセス、大和証券やヤマハなど委託元の公表が連鎖","publisher":"innovaTopia","date":"2026-10-13","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118849/"},{"title":"委託先事業者に対する不正アクセスによるお客様情報の漏えいの可能性について","publisher":"シチズン時計","date":"2026-10-06","url":"https://www.citizen.co.jp/release/news/detail/2026/20261006.html"},{"title":"シチズン時計、問い合わせフォームの委託先サーバに不正アクセス ～ 個人情報約10万件漏えい可能性","publisher":"ScanNetSecurity","date":"2026-10-08","url":"https://scan.netsecurity.ne.jp/article/2026/10/08/56412.html"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"シチズン時計","en":"Citizen Watch"},"group":"access"},{"id":"b0978bdca0","date":"2026-10-06","occurred":"2026-10-02","disclosed":"2026-10-06","org":{"ja":"スカラコミュニケーションズ（FAQシステム i-ask）","en":"Scala Communications (i-ask FAQ system)"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":713126,"affected_orgs":5,"cost_jpy":null,"outage":null,"vector":{"ja":"i-askの管理サイトに不正ログインされ、悪意あるプログラムを設置。同じサーバー上の顧客のDBから問い合わせデータを取得","en":"Unauthorized login to i-ask admin site; malicious program planted; inquiry data pulled from DBs of clients on same server"},"actor":null,"summary":{"ja":"FAQシステムi-askの管理サイトに不正ログインされ、不正プログラムを設置されて同じサーバー上の最大5社分、延べ最大71万3126件の問い合わせ情報が取得された可能性がある。","en":"An attacker logged into the i-ask FAQ admin site, planted a malicious program and may have pulled up to 713,126 inquiry records belonging to up to five client companies on the same server."},"sources":[{"title":"FAQシステム「i-ask」への不正アクセスによる個人情報漏えいに関するお詫びとお知らせ","publisher":"スカラコミュニケーションズ","date":"2026-10-06","url":"https://scala-com.jp/news/2026/10-1/"},{"title":"【解説】i-ask・Commune・IDCFクラウドに不正アクセス、大和証券やヤマハなど委託元の公表が連鎖","publisher":"innovaTopia","date":"2026-10-13","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118849/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"i-ask（スカラコミュニケーションズ）","en":"i-ask (Scala Communications)"},"group":"access"},{"id":"7eb3215b31","date":"2026-10-06","occurred":"2026-10-03","disclosed":"2026-10-06","org":{"ja":"ミスターマックス","en":"MrMax Holdings (MrMax)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":1735154,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"10月3日からアプリとオンラインストアを一時停止","en":"App and online store temporarily suspended from 10-03"},"vector":{"ja":"アプリとオンラインストアの基盤ソフトの機能が悪用された","en":"Misuse of a function of the software behind the app and online store"},"actor":null,"summary":{"ja":"ディスカウントストアのアプリとオンラインストアのサーバーに不正侵入され、最大173万5,154人の会員ID・氏名・メールアドレス・電話番号が流出した。","en":"Discount retailer MrMax's app and online-store server was breached; member IDs, names, emails and phone numbers of up to 1,735,154 people leaked."},"sources":[{"title":"不正アクセスによる情報流出に関するお詫びとお知らせ","publisher":"ミスターマックス","date":"2026-10-06","url":"https://www.mrmax.co.jp/info/incident_20261006/"},{"title":"ミスターマックスで不正アクセス 個人情報最大170万人超流出か","publisher":"NHK","date":"2026-10-06","url":"https://news.web.nhk/newsweb/na/nd-20261006de55099"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ミスターマックス","en":"MrMax Holdings"},"group":"access"},{"id":"b057c8a502","date":"2026-10-06","occurred":"2026-10-04","disclosed":"2026-10-06","org":{"ja":"ニモカ（nimoca利用履歴照会サービス）","en":"nimoca (IC card usage-history lookup)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":521,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"10月4日17:40から利用履歴照会サービスを停止","en":"Usage-history lookup service suspended from 4 Oct 17:40"},"vector":{"ja":"特定の入力に応じて登録データ入りメールを自動送信する公開Webサービスへの攻撃","en":"Attack on a public web service that auto-sent emails containing registration data in response to specific input"},"actor":null,"summary":{"ja":"交通系ICカードnimocaの利用履歴照会サービスが攻撃を受け、521件の登録情報の一部を含むメールが利用者宛に自動送信された。サービスは停止された。","en":"nimoca's IC-card usage-history web service was attacked, causing emails with partial registration data (card number, birth date) for 521 users to be sent automatically. The service was suspended."},"sources":[{"title":"nimoca利用履歴照会サービスへの第三者からの不正アクセス（公開WEBサービスへの攻撃）による情報漏えい","publisher":"ニモカ","date":"2026-10-06","url":"https://www.nimoca.jp/storage/files/information/107/20261006.pdf"},{"title":"【解説】旭化成・損保ジャパンなど不正アクセス5件、10月6〜7日の公表を整理","publisher":"innovaTopia","date":"2026-10-08","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118706/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ニモカ","en":"nimoca"},"group":"access"},{"id":"e38f736969","date":"2026-10-06","occurred":"2026-10-05","disclosed":"2026-10-06","org":{"ja":"小池酸素工業","en":"Koike Sanso Kogyo"},"sector":"manufacturing","type":"other","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"一部システムが停止、社内ネットワークを制限、一部業務に影響","en":"Some systems down, internal network restricted, some operations affected"},"vector":null,"actor":null,"summary":{"ja":"10月5日にサイバー攻撃を認識し、一部システムの障害と業務への影響が続いている。社内環境の情報を含む可能性のあるファイルがネット上で公開されていることが確認された。","en":"Koike Sanso detected a cyberattack on 5 October that took some systems down and affected operations. Files that may contain data from its environment were found published online."},"sources":[{"title":"当社へのサイバー攻撃に関するお知らせ（第3報）","publisher":"小池酸素工業","date":"2026-10-15","url":"https://koike-japan.com/pages/1?detail=1&b_id=206&r_id=524"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"小池酸素工業","en":"Koike Sanso Kogyo"},"group":"other"},{"id":"52143ab39c","date":"2026-10-06","occurred":"2026-10-02","disclosed":"2026-10-06","org":{"ja":"株式会社アクティブ（通販サイト）","en":"Active Co., Ltd. (online shop)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":54916,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"SQLインジェクション。不正に作成された管理者アカウントから顧客・受注データを出力","en":"SQL injection; a rogue administrator account was created and used to export customer and order data"},"actor":null,"summary":{"ja":"業務用冷凍食品メーカーのアクティブは、通販サイトへのSQLインジェクション攻撃で不正な管理者アカウントが作られ、最大54,916件の顧客・受注情報（店名、住所、電話番号、メールアドレスなど）が漏えいした可能性があると発表した。","en":"Professional frozen-food maker Active said a SQL injection on its online shop created a rogue admin account that exported up to 54,916 customer and order records (shop name, address, phone, e-mail)."},"sources":[{"title":"【重要なお知らせ】弊社通販サイトへの不正アクセスによる個人情報漏えいの可能性に関するお詫びとお知らせ","publisher":"アクティブ","date":"2026-10-06","url":"https://www.active-pro.jp/news/4303/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"アクティブ","en":"Active"},"group":"access"},{"id":"c18b30c69f","date":"2026-10-07","occurred":"2026-08-23","disclosed":"2026-10-07","org":{"ja":"富山県立大学","en":"Toyama Prefectural University"},"sector":"education","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"学生のPCのマルウェアでMicrosoft 365の認証情報を盗まれた可能性が高い","en":"Student's Microsoft 365 credentials likely stolen by malware on the student's PC"},"actor":null,"summary":{"ja":"学生1人のMicrosoft 365アカウントが乗っ取られ、外部宛に迷惑メール1092件が送信された。情報漏えいは確認されていない。","en":"One student's Microsoft 365 account was taken over and used to send 1,092 spam emails; no data leak was confirmed."},"sources":[{"title":"【解説】旭化成・損保ジャパンなど不正アクセス5件、10月6〜7日の公表を整理","publisher":"innovaTopia","date":"2026-10-08","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118706/"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"富山県立大学","en":"Toyama Prefectural University"},"group":"other"},{"id":"1a48fe2bc4","date":"2026-10-07","occurred":"2026-10-01","disclosed":"2026-10-07","org":{"ja":"戸田建設","en":"Toda Corporation"},"sector":"manufacturing","type":"unauthorized_access","via_vendor":false,"records":4778,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"影響を受けたシステムをネットワークから隔離","en":"Affected systems isolated from the network"},"vector":{"ja":"支払管理システムへの外部からの不正アクセス（手口は非公表）","en":"External unauthorized access to the payment-management system (method not disclosed)"},"actor":null,"summary":{"ja":"取引先への支払い管理システムなどに外部から不正アクセスがあり、取引先担当者のメール最大7200件、取引データ最大6000件、従業員4778名分の情報が流出した。","en":"Toda's partner-payment management system was accessed without authorization; up to 7,200 partner contact emails, up to 6,000 transaction records and 4,778 employees' details leaked."},"sources":[{"title":"当社システムへの不正アクセスによる情報流出について","publisher":"戸田建設","date":"2026-10-07","url":"https://www.toda.co.jp/news/2026/20261007_006350.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"戸田建設","en":"Toda"},"group":"access"},{"id":"d8f5f0b66f","date":"2026-10-07","occurred":"2026-10-02","disclosed":"2026-10-07","org":{"ja":"損害保険ジャパン（SMILING ROAD問い合わせ／委託先i-ask）","en":"Sompo Japan (SMILING ROAD inquiries via i-ask)"},"sector":"finance","type":"supply_chain","via_vendor":true,"records":60000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"委託先スカラコミュニケーションズのi-askサーバーへの侵害","en":"Breach of contractor Scala Communications' i-ask server"},"actor":null,"summary":{"ja":"委託先スカラコミュニケーションズのサーバーへの不正アクセスで、法人向けドラレコ「SMILING ROAD」の問い合わせ延べ約6万件の情報が漏えいした可能性がある。","en":"Via the breach of contractor Scala Communications, about 60,000 inquiry records for Sompo Japan's SMILING ROAD dashcam service may have leaked."},"sources":[{"title":"当社事業者向けサービスで使用する外部委託先システムへの不正アクセスによるお客さま情報漏えいの可能性について","publisher":"損害保険ジャパン","date":"2026-10-07","url":"https://www.sompo-japan.co.jp/-/media/SJNK/files/news/2026/20261007_1.pdf"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"損害保険ジャパン","en":"Sompo Japan"},"group":"access"},{"id":"0571c95cae","date":"2026-10-07","occurred":null,"disclosed":"2026-10-07","org":{"ja":"IDCフロンティア（IDCFクラウド）","en":"IDC Frontier (IDCF Cloud)"},"sector":"it_cloud","type":"ransomware","via_vendor":false,"records":null,"affected_orgs":495,"cost_jpy":null,"outage":{"ja":"東日本リージョン1のVMが10月7日3:40から停止。コンソールも停止。バックアップを取り出せるのは顧客495件中194件のみ","en":"East Japan Region 1 (tesla/henry/pascal/joule zones) VMs stopped from 7 Oct 03:40; consoles suspended; only 194 of 495 customers (snapshot users) can retrieve backups"},"vector":{"ja":"非公表","en":"Not disclosed"},"actor":"Unverified claim posted on X ('YOUR CLOUD IS OURS'); not confirmed by IDCF","summary":{"ja":"ソフトバンク子会社のIDCフロンティアのクラウドがランサムウェア攻撃を受け、495の企業・自治体のサーバーが停止した。第5報では仮想サーバー内データの外部流出は確認されず、スナップショット利用の194顧客はバックアップを取り出せるとした。","en":"SoftBank subsidiary IDC Frontier's cloud was hit by ransomware, stopping servers for 495 companies and municipalities. Its 5th report found no evidence of data exfiltration from customer VMs and said 194 snapshot users can recover backups; registration data of 48 companies was queried without authorization."},"sources":[{"title":"【第3報】当社サービスの一部システムへの不正アクセスによる障害について","publisher":"IDCフロンティア","date":"2026-10-08","url":"https://www.idcf.jp/news/topics/20261008001"},{"title":"【第4報】","publisher":"IDCフロンティア","date":"2026-10-09","url":"https://www.idcf.jp/news/topics/20261009001"},{"title":"【第5報】","publisher":"IDCフロンティア","date":"2026-10-14","url":"https://www.idcf.jp/news/topics/20261014001"},{"title":"一部顧客のデータは復旧困難 IDCフロンティアにランサムウェア、495社・自治体に影響","publisher":"@IT（ITmedia）","date":"2026-10-09","url":"https://atmarkit.itmedia.co.jp/ait/articles/2610/09/news036.html"},{"title":"【第2報】当社サービスの一部システムに対する不正アクセスについて","publisher":"IDCフロンティア","date":"2026-10-07","url":"https://www.idcf.jp/news/topics/20261007002"},{"title":"ソフトバンク子会社にランサムウエア攻撃 企業や自治体に影響","publisher":"NHK","date":"2026-10-08","url":"https://news.web.nhk/newsweb/na/nd-20261008de56405"},{"title":"「IDCFクラウド」障害の原因はランサムウェア攻撃、ニッスイ、茨城県など495の企業や自治体に影響","publisher":"INTERNET Watch","date":"2026-10-08","url":"https://internet.watch.impress.co.jp/docs/news/2146594.html"},{"title":"IDCFクラウドの不正アクセス、一部データは復元可能に データ流出は「確認されず」","publisher":"Impress Watch","date":"2026-10-14","url":"https://www.watch.impress.co.jp/docs/news/2148186.html"}],"confidence":"high","wave":false,"landmark":true,"short":{"ja":"IDCフロンティア","en":"IDC Frontier"},"group":"ransomware"},{"id":"40d94dce6b","date":"2026-10-07","occurred":null,"disclosed":"2026-10-07","org":{"ja":"日水物流（ニッスイグループ）","en":"Nissui Logistics (Nissui group)"},"sector":"logistics_transport","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"全拠点で入出庫・出荷を停止。10月9日に一部再開。IDCFに頼らない新システムを構築中","en":"Inbound/outbound shipping stopped at all bases; partial restart 9 Oct; new system being built off IDCF"},"vector":{"ja":"取引先のIDCフロンティアのクラウド障害","en":"Outage of vendor IDC Frontier's cloud"},"actor":null,"summary":{"ja":"IDCフロンティアへの不正アクセスの影響で、日水物流の全拠点で入出庫業務ができなくなった。10月9日に一部再開し、IDCF以外のサーバーでシステムを再構築している。","en":"The IDCF attack halted inbound/outbound operations at all Nissui Logistics bases; some resumed on 9 October while the system is rebuilt on non-IDCF servers. No personal data was on the affected server."},"sources":[{"title":"日水物流における障害について（第3報）","publisher":"ニッスイ","date":"2026-10-14","url":"https://www.nissui.co.jp/news/20261014.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"日水物流","en":"Nissui Logistics"},"group":"access"},{"id":"e8d75ebda4","date":"2026-10-07","occurred":"2025-12-11","disclosed":"2026-10-07","org":{"ja":"エイチ・アイ・エス（タイ法人H.I.S. TOURS）","en":"H.I.S. (Thai subsidiary H.I.S. Tours)"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":627,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"タイ法人のファイルサーバーへの不正アクセス。データの一部が引き出された可能性","en":"Unauthorized access to the Thai subsidiary's file server; some data exfiltrated"},"actor":null,"summary":{"ja":"エイチ・アイ・エスは、タイ法人のファイルサーバーが不正アクセスを受け、日本で取得した顧客最大627人分のパスポート情報などが流出した可能性があると発表した。検知は2025年12月で、公表まで約10か月かかった。","en":"H.I.S. said its Thai subsidiary's file server was breached and passport data of up to 627 customers collected in Japan may have been taken. The intrusion was detected in December 2025, about ten months before disclosure."},"sources":[{"title":"子会社ファイルサーバへの不正アクセスによる個人情報流出の可能性に関するお詫びとお知らせ","publisher":"エイチ・アイ・エス","date":"2026-10-07","url":"https://www.his.co.jp/assets/20261007.pdf"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"エイチ・アイ・エス","en":"H.I.S."},"group":"access"},{"id":"6b7b2d2551","date":"2026-10-08","occurred":"2026-09-12","disclosed":"2026-10-08","org":{"ja":"株式会社ローソン","en":"Lawson, Inc."},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":2155345,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"ローソンアプリの予約機能を停止（10月中旬に再開予定）","en":"Lawson App reservation function suspended (resumption planned mid-October)"},"vector":{"ja":"ローソンアプリ関連のシステムが悪用された。利用者に自分の情報を表示する仕組みへ第三者がアクセス","en":"A Lawson-app-related system was misused: a mechanism meant to show users their own information was accessed by a third party"},"actor":null,"summary":{"ja":"ローソンIDが9月12〜14日に不正アクセスを受け2,155,345件が漏えいし、アプリ予約でも26件が漏えいした。アプリ関連の仕組みが悪用された。","en":"Lawson ID was accessed without authorization on 12–14 Sep and 2,155,345 records leaked; the app reservation service also leaked 26 records. An app-related system was abused."},"sources":[{"title":"[Lawson notice on unauthorized access to Lawson ID and Lawson App reservations; exact Japanese title not captured]","publisher":"株式会社ローソン","date":"2026-10-08","url":"https://www.lawson.co.jp/contents/cont07/1533174_3310.html"},{"title":"ローソンのアカウントサービスに不正アクセス、215 万 5,345 件のローソン ID が漏えい","publisher":"ScanNetSecurity","date":"2026-10-13","url":"https://scan.netsecurity.ne.jp/article/2026/10/13/56434.html"},{"title":"第一興商で個人情報漏えいのおそれ ローソンでは漏えいが確認","publisher":"NHK","date":"2026-10-08","url":"https://news.web.nhk/newsweb/na/nd-20261008de56831"},{"title":"止まらぬ情報漏えい　ローソンやスカイチケット、第一興商など","publisher":"Impress Watch","date":"2026-10-09","url":"https://www.watch.impress.co.jp/docs/news/2147072.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ローソン","en":"Lawson"},"group":"access"},{"id":"1ca81688dc","date":"2026-10-08","occurred":"2026-10-01","disclosed":"2026-10-08","org":{"ja":"株式会社第一興商（委託先：日本コロムビアグループ株式会社）","en":"Daiichikosho Co., Ltd. (contractor: Nippon Columbia Group)"},"sector":"media_entertainment","type":"supply_chain","via_vendor":true,"records":8724000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"委託先の日本コロムビアグループの1台のPCがマルウェアに感染。第一興商の個人情報を一時保管していた","en":"Malware infection on one PC at contractor Nippon Columbia Group that temporarily held Daiichikosho personal data"},"actor":null,"summary":{"ja":"第一興商の個人情報取扱い委託先で従業員PCがマルウェアに感染し、ビッグエコー会員など約872万4千件の情報が漏えいしたおそれがある。","en":"A PC at a contractor handling Daiichikosho's personal data was infected with malware. About 8.72 million records, including Big Echo karaoke members, may have leaked."},"sources":[{"title":"委託先における個人情報漏えいのおそれについて ※追記あり","publisher":"株式会社第一興商","date":"2026-10-08","url":"https://www.dkkaraoke.co.jp/news/newsletter/261008_2.html"},{"title":"第一興商の委託先 日本コロムビアグループでマルウェア感染、約 8,724,000 件の情報が漏えいしたおそれを否定できず","publisher":"ScanNetSecurity","date":"2026-10-14","url":"https://scan.netsecurity.ne.jp/article/2026/10/14/56449.html"},{"title":"企業への不正アクセス 相次いで明らかに","publisher":"NHK","date":"2026-10-09","url":"https://news.web.nhk/newsweb/na/nd-20261009de56931"},{"title":"More Japanese Firms Hit by Large-Scale Data Breaches","publisher":"Jiji Press (nippon.com)","date":"2026-10-09","url":"https://www.nippon.com/en/news/yjj2026100900441/more-japanese-firms-hit-by-large-scale-data-breaches.html"},{"title":"ブックオフ、スカイチケットでも…企業の情報流出相次ぐ 約2週間で最大6200万件あまりに JNN調べ","publisher":"TBS NEWS DIG (JNN)","date":"2026-10-09","url":"https://news.infoseek.co.jp/article/tbs_3002456/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"第一興商（委託先経由）","en":"Daiichikosho (via contractor)"},"group":"access"},{"id":"bb324fb762","date":"2026-10-08","occurred":"2026-10-02","disclosed":"2026-10-08","org":{"ja":"オリックス生命保険（委託先i-ask）","en":"ORIX Life Insurance (via i-ask)"},"sector":"finance","type":"supply_chain","via_vendor":true,"records":26500,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"委託先スカラコミュニケーションズへの侵害","en":"Breach of contractor Scala Communications"},"actor":null,"summary":{"ja":"問い合わせ管理の委託先が不正アクセスを受け、医療情報を含む問い合わせ内容など延べ約2万6500件が漏えいした可能性がある。","en":"A breach at its inquiry-management contractor may have exposed about 26,500 inquiry records, including health information customers had written in."},"sources":[{"title":"当社の委託先における個人情報漏えいの可能性について","publisher":"オリックス生命保険","date":"2026-10-08","url":"https://www.orixlife.co.jp/b3cd698c38a74ebea491976d56455ecd/77eb698f1d9543a39440e414940f9f4d/n261008.pdf"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"オリックス生命保険","en":"ORIX Life Insurance"},"group":"access"},{"id":"f0a98aa54f","date":"2026-10-08","occurred":"2026-10-07","disclosed":"2026-10-08","org":{"ja":"八十二長野銀行","en":"Hachijuni Nagano Bank"},"sector":"finance","type":"account_takeover","via_vendor":false,"records":35,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"職員が不審なメールを受信し、職員のメールアカウントに不正アクセスされた","en":"Suspicious email received by staff led to unauthorized access to a staff mail account"},"actor":null,"summary":{"ja":"職員が受信した不審メールを起点に職員のメールアカウントが不正アクセスを受け、35名分のメールアドレスが流出した可能性がある。","en":"A suspicious email received by a staff member led to unauthorized access to that mail account; 35 customers' email addresses may have leaked."},"sources":[{"title":"不正アクセスによるお客さま情報漏えいのお詫びとお知らせ","publisher":"八十二長野銀行","date":"2026-10-08","url":"https://bank.82group.jp/file.jsp?id=release/2026/pdf/news20261008.pdf"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"八十二長野銀行","en":"Hachijuni Nagano Bank"},"group":"other"},{"id":"8576341f6b","date":"2026-10-08","occurred":"2026-10-07","disclosed":"2026-10-08","org":{"ja":"小平市（市公式ホームページ）","en":"Kodaira City, Tokyo (official website)"},"sector":"government","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"市公式サイト、議会サイト、粗大ごみ申込みページが10月7日から利用不可。10月16日時点で復旧せず","en":"City website, council site and bulky-waste application page unavailable from 7 Oct; still down on 16 Oct"},"vector":{"ja":"サイト保守委託先が使うクラウド基盤へのランサムウェア（事業者名は非公表）","en":"Ransomware on the cloud infrastructure used by the website maintenance contractor (provider not named)"},"actor":null,"summary":{"ja":"市ホームページの保守委託先が使うクラウド基盤がランサムウェア攻撃を受け、10月7日朝から市のサイトが閲覧できなくなった。問い合わせフォームの入力情報が漏えいするおそれがあるとした。","en":"Ransomware hit the cloud platform used by Kodaira's website maintenance contractor, taking the city site offline from 7 October. The city warned inquiry-form data could be exposed."},"sources":[{"title":"小平市公式ホームページ（臨時ページ）","publisher":"小平市","date":"2026-10-16","url":"https://www.city.kodaira.tokyo.jp/"},{"title":"小平市ホームページ障害（委託先クラウド基盤へのランサムウェア）","publisher":"rocket-boys セキュリティ対策Lab","date":"2026-10-08","url":"https://rocket-boys.co.jp/?p=42968"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"小平市","en":"Kodaira City, Tokyo"},"group":"access"},{"id":"2999848bac","date":"2026-10-08","occurred":null,"disclosed":"2026-10-08","org":{"ja":"株式会社ユーザベース（NewsPicks）","en":"Uzabase, Inc. (NewsPicks)"},"sector":"media_entertainment","type":"unauthorized_access","via_vendor":false,"records":362000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"社内の業務管理ツールへの第三者による不正アクセス（Rocket Boysはツールの脆弱性と報道）。アクセスキーは再発行","en":"Third-party unauthorized access to an internal business admin tool (Rocket Boys reports a tool vulnerability); access keys later reissued"},"actor":null,"summary":{"ja":"NewsPicksの業務用管理ツールが不正アクセスを受け、メールアドレス最大32.3万件、カード情報の一部最大36.2万件などが漏えいした可能性がある。","en":"An internal admin tool used to run NewsPicks was breached, possibly exposing up to 323,000 email addresses and up to 362,000 partial card records, among other items."},"sources":[{"title":"【重要】NewsPicksのお客様の個人情報漏洩の可能性に関するお詫びとお知らせ","publisher":"株式会社ユーザベース","date":"2026-10-08","url":"https://corp.newspicks.com/info/20261008"},{"title":"【第二報】NewsPicksのお客様の個人情報漏洩の可能性に関するお詫びとお知らせ","publisher":"株式会社ユーザベース","date":"2026-10-09","url":"https://corp.newspicks.com/info/20261009"},{"title":"NewsPicksに不正アクセス、氏名・勤務先・カード番号の一部が漏えいの可能性","publisher":"innovaTopia","date":"2026-10-09","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118728/"},{"title":"[NewsPicks second-report article]","publisher":"Rocket Boys (Security Measures Lab)","date":"2026-10-09","url":"https://rocket-boys.co.jp/?p=43144"},{"title":"企業への不正アクセス 相次いで明らかに","publisher":"NHK","date":"2026-10-09","url":"https://news.web.nhk/newsweb/na/nd-20261009de56931"}],"confidence":"medium","wave":true,"landmark":false,"short":{"ja":"NewsPicks","en":"NewsPicks"},"group":"access"},{"id":"8fd6edaf70","date":"2026-10-08","occurred":null,"disclosed":"2026-10-08","org":{"ja":"ハイホー（hi-ho）","en":"hi-ho (ISP)"},"sector":"it_cloud","type":"account_takeover","via_vendor":false,"records":38509,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"マイページのログイン情報を、電話でだまし取る手口（ソーシャルエンジニアリング）","en":"Phone social engineering to obtain My Page login details"},"actor":null,"summary":{"ja":"電話によるソーシャルエンジニアリングでマイページのログイン情報が取得され、3万8509契約分の氏名・住所・契約情報が第三者に閲覧された。光回線代理店の社員らが逮捕されたと報じられた。","en":"Phone-based social engineering was used to obtain My Page logins, exposing 38,509 contracts' names, addresses and contract details; employees of a fibre-sales agency were reportedly arrested."},"sources":[{"title":"【解説】手間いらず・バイトル・JR九州など不正アクセス14件、10月8〜10日の公表を整理","publisher":"innovaTopia","date":"2026-10-12","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118817/"}],"confidence":"medium","wave":false,"landmark":false,"short":{"ja":"ハイホー","en":"hi-ho"},"group":"other"},{"id":"161e878561","date":"2026-10-09","occurred":"2026-10-02","disclosed":"2026-10-09","org":{"ja":"アドベンチャー（skyticket）","en":"Adventure, Inc. (skyticket)"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":14640000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"保存済みカードでの決済を停止","en":"Stored-card payments suspended"},"vector":{"ja":"skyticketの管理機能の一部が不正操作され、他のサーバーとクラウド上のデータにアクセスされた","en":"Unauthorized operation of part of skyticket's admin functions; data on other servers and in the cloud accessed"},"actor":null,"summary":{"ja":"旅行予約サイトskyticketの管理機能が不正に操作され、約1,464万件の顧客情報が流出した。うち約413万件にはパスワードのハッシュが含まれる。別経路でも2件の不正アクセス・閲覧が判明した。","en":"Part of skyticket's admin functions was abused and about 14.64 million customer records leaked, about 4.13 million with password hashes. Two other incidents via different routes were disclosed at the same time."},"sources":[{"title":"skyticketで1464万件の個人情報流出か 413万件にはパスワードも、異なる3経路で不正アクセス","publisher":"ITmedia @IT","date":"2026-10-13","url":"https://atmarkit.itmedia.co.jp/ait/articles/2610/13/news037.html"},{"title":"止まらぬ情報漏えい　ローソンやスカイチケット、第一興商など","publisher":"Impress Watch","date":"2026-10-09","url":"https://www.watch.impress.co.jp/docs/news/2147072.html"},{"title":"「スカイチケット」に不正アクセス 1400万件超 個人情報流出か","publisher":"NHK","date":"2026-10-09","url":"https://news.web.nhk/newsweb/na/nd-20261009de57103"},{"title":"ブックオフ、スカイチケットでも…企業の情報流出相次ぐ 約2週間で最大6200万件あまりに JNN調べ","publisher":"TBS NEWS DIG (JNN)","date":"2026-10-09","url":"https://news.infoseek.co.jp/article/tbs_3002456/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"skyticket","en":"skyticket"},"group":"access"},{"id":"bf6846e1fa","date":"2026-10-09","occurred":"2026-10-05","disclosed":"2026-10-09","org":{"ja":"コミューン株式会社（Commune / Commune for Work）","en":"Commune Inc. (Commune / Commune for Work)"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":307000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"10月6日21:00ごろから全コミュニティをメンテナンスモードに。10月8日から段階的に再開、10月10日0:50から再び緊急メンテナンス","en":"All communities in maintenance mode from about 21:00 on 10-06; phased reopening from 10-08; more emergency maintenance from 00:50 on 10-10"},"vector":{"ja":"システムの欠陥を突かれ、非公開コミュニティの招待リンクを入手。会員登録し管理者になりすまして、会員データの閲覧・持ち出し・改ざん","en":"A system flaw let the attacker obtain private-community invite links, register as a member, impersonate administrators, view and export member data and alter data"},"actor":null,"summary":{"ja":"コミュニティ基盤Communeが不正アクセスを受け、攻撃者は招待リンクを悪用して管理者になりすまし、約30万7千人分の会員情報を取得した。スズキやヤマハなど多数の利用企業が影響を公表した。","en":"Attackers abused private invite links on the Commune community platform, impersonated admins and took data on about 307,000 members. Many client brands, including Suzuki and Yamaha, disclosed impact."},"sources":[{"title":"【重要】当社サービス「Commune」、「Commune for Work」への不正アクセスによる個人情報の漏えいに関するお詫びとお知らせ","publisher":"コミューン株式会社","date":"2026-10-09","url":"https://communeinc.com/ja/news/2026oct09"},{"title":"[INTERNET Watch report on Commune unauthorized access; title not captured]","publisher":"INTERNET Watch (Impress)","date":"2026-10-09","url":"https://internet.watch.impress.co.jp/docs/news/2147291.html"},{"title":"当社コミュニティサイト「スズキヴィレッジ」への不正アクセスに関するお知らせ","publisher":"スズキ株式会社","date":"2026-10-09","url":"https://www.suzuki.co.jp/release/d/2026/1009/pdf/1009.pdf"},{"title":"[Commune affected-organisations list]","publisher":"Rocket Boys (Security Measures Lab)","date":"2026-10-15","url":"https://rocket-boys.co.jp/security-measures-lab/commune_unauthorized_access_affected_organizations/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"コミューン","en":"Commune"},"group":"access"},{"id":"78ff7bec03","date":"2026-10-09","occurred":"2026-10-05","disclosed":"2026-10-09","org":{"ja":"LINEヤフー（DS.LAB／Commune経由）","en":"LY Corporation (DS.LAB, via Commune)"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":1750,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"DS.LABを停止","en":"DS.LAB suspended"},"vector":{"ja":"Communeが提供するシステムの欠陥を悪用","en":"Flaw in system provided by Commune exploited"},"actor":null,"summary":{"ja":"委託先コミューンのシステムの不備を突かれ、DS.LABのユーザー1750名分の氏名・メールなどが閲覧・取得された可能性がある。","en":"A flaw in contractor Commune's system was exploited; names, emails and profile data of 1,750 DS.LAB users may have been viewed or taken."},"sources":[{"title":"DS.LABへの不正アクセスについて","publisher":"LINEヤフー","date":"2026-10-09","url":"https://www.lycorp.co.jp/ja/privacy-security/announcement/020892/"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"LINEヤフー","en":"LY"},"group":"access"},{"id":"ecb139db0e","date":"2026-10-09","occurred":"2026-10-05","disclosed":"2026-10-09","org":{"ja":"リゾートトラスト株式会社","en":"Resorttrust, Inc."},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":62000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"統合予約サイトと一部Webサイトをメンテナンスのため一時停止（10月16日付の告知）","en":"Integrated reservation site and some websites temporarily suspended for maintenance (notice of 10-16)"},"vector":{"ja":"統合予約サイトのシステムへの第三者による不正アクセス（10月16日付の告知による）","en":"Third-party unauthorized access to the integrated reservation site's system (per the 10-16 notice)"},"actor":null,"summary":{"ja":"リゾートトラストのウェブサイトが10月5日夜に不正アクセスを受け、グループ会員約2万6千件とザ・カハラ横浜予約者約3万6千件の情報が漏えいした。","en":"Resorttrust's website was breached on the evening of 5 Oct. Data on about 26,000 group members and about 36,000 Kahala Yokohama hotel guests leaked."},"sources":[{"title":"当社ウェブサイトへの一部不正アクセスによる個人情報漏洩に関するお詫びとご報告","publisher":"リゾートトラスト株式会社","date":"2026-10-09","url":"https://www.resorttrust.co.jp/wp_api/wp-content/uploads/2026/10/20261009.pdf"},{"title":"当社ウェブサイトのメンテナンスに伴う一部休止と個人情報漏えいに関する対応について","publisher":"リゾートトラスト株式会社","date":"2026-10-16","url":"https://www.resorttrust.co.jp/topics/20261016/3397/"},{"title":"[Resorttrust unauthorized access article]","publisher":"Rocket Boys (Security Measures Lab)","date":"2026-10-10","url":"https://rocket-boys.co.jp/?p=43181"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"リゾートトラスト","en":"Resorttrust"},"group":"access"},{"id":"b64507be17","date":"2026-10-09","occurred":"2026-10-05","disclosed":"2026-10-09","org":{"ja":"スズキ（スズキヴィレッジ／Commune経由）","en":"Suzuki (Suzuki Village community, via Commune)"},"sector":"manufacturing","type":"supply_chain","via_vendor":true,"records":3000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"コミュニティサイトを停止","en":"Community site suspended"},"vector":{"ja":"基盤提供会社Communeへの侵害","en":"Breach of platform provider Commune"},"actor":null,"summary":{"ja":"コミュニティサイトの提供事業者コミューンへの不正アクセスにより、約3000名分のメールアドレスやニックネーム、所有車名などが閲覧・取得された可能性がある。","en":"Through the breach at platform provider Commune, about 3,000 Suzuki Village members' emails, nicknames, regions and car models may have been viewed or taken."},"sources":[{"title":"当社コミュニティサイト「スズキヴィレッジ」への不正アクセスに関するお知らせ","publisher":"スズキ","date":"2026-10-09","url":"https://www.suzuki.co.jp/release/d/2026/1009/pdf/1009.pdf"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"スズキ","en":"Suzuki"},"group":"access"},{"id":"ae3d41006b","date":"2026-10-09","occurred":"2026-10-05","disclosed":"2026-10-09","org":{"ja":"ヤマハ（Yamaha Network Engineer Club／Commune経由）","en":"Yamaha Corporation (Yamaha Network Engineer Club, via Commune)"},"sector":"manufacturing","type":"supply_chain","via_vendor":true,"records":1600,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"基盤提供会社Communeへの侵害","en":"Breach of platform provider Commune"},"actor":null,"summary":{"ja":"コミューンへの不正アクセスにより、ヤマハのネットワークエンジニア向けコミュニティの会員約1600名分の情報が影響を受けた可能性がある。","en":"About 1,600 members of Yamaha's network-engineer community may have been affected by the Commune breach."},"sources":[{"title":"【解説】i-ask・Commune・IDCFクラウドに不正アクセス、大和証券やヤマハなど委託元の公表が連鎖","publisher":"innovaTopia","date":"2026-10-13","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118849/"}],"confidence":"low","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"ヤマハ","en":"Yamaha"},"group":"access"},{"id":"603e7234b5","date":"2026-10-09","occurred":"2026-10-06","disclosed":"2026-10-09","org":{"ja":"ブックオフグループホールディングス株式会社（子会社の会員管理システム）","en":"BOOKOFF GROUP HOLDINGS (subsidiary member-management system)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":6430000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"子会社の会員管理システムに第三者がアクセス。会社は脆弱性を修正し外部接続を遮断したと説明","en":"Third-party access to a subsidiary's member-management system; the company says it fixed a vulnerability and cut external access"},"actor":null,"summary":{"ja":"ブックオフ子会社の会員管理システムが不正アクセスを受け、最大約643万件の会員データが外部から取得された。","en":"A Bookoff subsidiary's member-management system was breached, and up to about 6.43 million member records were taken."},"sources":[{"title":"不正アクセスによる個人情報漏えいに関するお詫びとお知らせ","publisher":"ブックオフグループホールディングス株式会社","date":"2026-10-09","url":"https://ssl4.eir-parts.net/doc/9278/tdnet/2893077/00.pdf"},{"title":"ブックオフグループホールディングス子会社に不正アクセス、最大 約 643 万件の会員データが漏えい","publisher":"ScanNetSecurity","date":"2026-10-14","url":"https://scan.netsecurity.ne.jp/article/2026/10/14/56446.html"},{"title":"More Japanese Firms Hit by Large-Scale Data Breaches","publisher":"Jiji Press (nippon.com)","date":"2026-10-09","url":"https://www.nippon.com/en/news/yjj2026100900441/more-japanese-firms-hit-by-large-scale-data-breaches.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ブックオフ","en":"BOOKOFF"},"group":"access"},{"id":"90e5b89203","date":"2026-10-09","occurred":"2026-10-06","disclosed":"2026-10-09","org":{"ja":"ディップ（バイトル・バイトルNEXT）","en":"dip Corporation (Baitoru, Baitoru NEXT)"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":3885771,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"サイトの一部の仕様上の欠陥を突いた海外からのアクセス","en":"Overseas access exploiting a specification flaw in part of the site"},"actor":null,"summary":{"ja":"求人サイトバイトルの一部機能の仕様上の不備を海外から突かれ、最大388万5771件の会員メールアドレスが漏えいした可能性がある。","en":"Attackers from overseas exploited a specification flaw in part of the Baitoru job site; up to 3,885,771 members' email addresses may have been exposed."},"sources":[{"title":"バイトル・バイトルNEXT 不正アクセスに関するお知らせ","publisher":"ディップ","date":"2026-10-09","url":"https://www.dip-net.co.jp/news/2192"},{"title":"【解説】手間いらず・バイトル・JR九州など不正アクセス14件、10月8〜10日の公表を整理","publisher":"innovaTopia","date":"2026-10-12","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118817/"},{"title":"「バイトル」会員メールアドレス 388万件余漏えいのおそれ","publisher":"NHK","date":"2026-10-09","url":"https://news.web.nhk/newsweb/na/nd-20261009de57499"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"バイトル（ディップ）","en":"Baitoru (dip)"},"group":"access"},{"id":"c853b5707a","date":"2026-10-09","occurred":"2026-10-07","disclosed":"2026-10-09","org":{"ja":"東日本旅客鉄道・ビューカード（えきねっと・大人の休日倶楽部ほか、IDCF経由）","en":"JR East and View Card (eki-net, Otona no Kyujitsu Club et al., via IDCF)"},"sector":"logistics_transport","type":"supply_chain","via_vendor":true,"records":6090000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"IDCFクラウド上のメール配信サービスが、IDCFへのランサムウェア攻撃を受けた","en":"Email delivery service hosted on IDCF Cloud hit by the IDCF ransomware attack"},"actor":null,"summary":{"ja":"IDCFクラウドへのランサムウェア攻撃により、JR東日本グループのメール配信関連データが影響を受け、最大約609万件の顧客アカウント情報が漏えいした可能性がある。","en":"The ransomware attack on IDCF Cloud hit email-delivery data used by the JR East group, and up to about 6.09 million customer accounts may be exposed."},"sources":[{"title":"More Japanese Firms Hit by Large-Scale Data Breaches","publisher":"Jiji Press (nippon.com)","date":"2026-10-09","url":"https://www.nippon.com/en/news/yjj2026100900441/more-japanese-firms-hit-by-large-scale-data-breaches.html"},{"title":"止まらぬ情報漏えい　ローソンやスカイチケット、第一興商など","publisher":"Impress Watch","date":"2026-10-09","url":"https://www.watch.impress.co.jp/docs/news/2147072.html"},{"title":"[eki-net / IDCF incident analysis]","publisher":"issoh (tech blog)","date":"2026-10-14","url":"https://www.issoh.co.jp/tech/details/18330/"},{"title":"JR東日本とビューカード 最大600万件余の会員情報漏えいか","publisher":"NHK","date":"2026-10-09","url":"https://news.web.nhk/newsweb/na/nd-20261009de57177"},{"title":"JR東日本、「えきねっと」など206万件漏えいの可能性","publisher":"Impress Watch","date":"2026-10-09","url":"https://www.watch.impress.co.jp/docs/news/2147202.html"}],"confidence":"medium","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"JR東日本・ビューカード","en":"JR East / View Card"},"group":"access"},{"id":"7d1e11a4ef","date":"2026-10-09","occurred":"2026-10-07","disclosed":"2026-10-09","org":{"ja":"九州旅客鉄道（JR九州Web会員メール）","en":"JR Kyushu (JR Kyushu Web member mail, via IDCF)"},"sector":"logistics_transport","type":"supply_chain","via_vendor":true,"records":1300000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"JR九州のメールマガジンを配信不可","en":"JR Kyushu mail magazine cannot be delivered"},"vector":{"ja":"IDCFクラウド上のメール配信サービス","en":"Mail delivery service hosted on IDCF Cloud"},"actor":null,"summary":{"ja":"IDCフロンティアへの攻撃でJR九州Web会員約130万件のメールアドレスが漏えいした可能性があると公表したが、10月15日の続報で漏えいの事実は確認されなかったとした。","en":"JR Kyushu said about 1.3M Web-member email addresses might have leaked via the IDCF attack, but its 15 October follow-up said IDCF's investigation found no leak."},"sources":[{"title":"IDCフロンティア社で発生した不正アクセスに伴うメールアドレス等漏えいの可能性について（続報）","publisher":"九州旅客鉄道","date":"2026-10-15","url":"https://www.jrkyushu.co.jp/common/inc/news/newtopics/__icsFiles/afieldfile/2026/10/15/202691015_mail_address_access.pdf"},{"title":"【解説】手間いらず・バイトル・JR九州など不正アクセス14件、10月8〜10日の公表を整理","publisher":"innovaTopia","date":"2026-10-12","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118817/"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"10月15日に漏えいはなかったと発表","en":"no leak confirmed on 15 Oct"},"short":{"ja":"JR九州","en":"JR Kyushu"},"group":"access"},{"id":"8371843fa6","date":"2026-10-09","occurred":"2026-10-07","disclosed":"2026-10-09","org":{"ja":"日本酒類販売（東京酒粋）","en":"Nihon Shurui Hanbai (Tokyo Shusui)"},"sector":"retail_food","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"メールマガジンの配信を停止","en":"Mail magazine delivery stopped"},"vector":{"ja":"IDCFで運用するメールサービス（future Scenario Cast）","en":"IDCF-hosted mail service (future Scenario Cast)"},"actor":null,"summary":{"ja":"IDCFクラウド上のメール配信サービス経由で、氏名・メール・誕生月が影響を受けた可能性がある。","en":"Via an IDCF-hosted mail delivery service, customers' names, emails and birth months may have been affected."},"sources":[{"title":"【解説】手間いらず・バイトル・JR九州など不正アクセス14件、10月8〜10日の公表を整理","publisher":"innovaTopia","date":"2026-10-12","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118817/"}],"confidence":"low","wave":false,"landmark":false,"short":{"ja":"日本酒類販売","en":"Nihon Shurui Hanbai"},"group":"access"},{"id":"4adc957aef","date":"2026-10-09","occurred":"2026-10-08","disclosed":"2026-10-09","org":{"ja":"ココナラ（スキルマーケット）","en":"coconala (Skill Market)"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"対象システムの脆弱性（詳細は未記載）","en":"Vulnerability in the target system (not specified)"},"actor":null,"summary":{"ja":"スキルマーケットに不正アクセスがあり、登録された履歴書449件と職務経歴書関連書類1845件が外部に持ち出された。","en":"Unauthorized access to coconala's Skill Market led to 449 résumés and 1,845 career-history documents being taken."},"sources":[{"title":"ココナラスキルマーケットへの不正アクセスについて","publisher":"ココナラ","date":"2026-10-09","url":"https://coconala.com/news/1391"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ココナラ","en":"coconala"},"group":"access"},{"id":"40e712b269","date":"2026-10-09","occurred":"2026-10-06","disclosed":"2026-10-09","org":{"ja":"ちとせグループ（ちとせアカデミー／Commune経由）","en":"Chitose Group (Chitose Academy, via Commune)"},"sector":"other","type":"supply_chain","via_vendor":true,"records":843,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"コミュニティサイトを停止","en":"Community site suspended"},"vector":{"ja":"Communeへの不正アクセス。全コミュニティ共通のログイン用署名鍵を入手した攻撃者が管理者になりすました","en":"Commune platform breach: attacker obtained the login signing key shared by all communities and impersonated a site administrator"},"actor":null,"summary":{"ja":"ちとせグループが運営するコミュニティサイト「ちとせアカデミー」で、基盤のCommuneが不正アクセスを受け、最大843人の会員の氏名・メールアドレス・プロフィールなどが閲覧または取得された可能性がある。","en":"Chitose Group's community site \"Chitose Academy\" runs on Commune, which was breached; names, e-mail addresses and profile data of up to 843 members may have been viewed or taken."},"sources":[{"title":"【重要】コミュニティサイト「ちとせアカデミー」への不正アクセスによる個人情報流出可能性に関するお知らせとお詫び","publisher":"ちとせグループ","date":"2026-10-09","url":"https://chitose-bio.com/jp/news/12177/"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"ちとせグループ","en":"Chitose Group"},"group":"access"},{"id":"63d55e8b2f","date":"2026-10-09","occurred":"2026-10-06","disclosed":"2026-10-09","org":{"ja":"株式会社エネコム","en":"Enecom, Inc."},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"社内ネットワークの一部への不正アクセス。複数の電子ファイルが外部に流出","en":"Intrusion into part of the internal network; several electronic files exfiltrated"},"actor":null,"summary":{"ja":"中国地方の通信事業者エネコムは、社内ネットワークの一部に不正アクセスを受け、複数の電子ファイルが外部に流出した形跡を確認した。ファイルに顧客情報が含まれていた可能性があり調査中。光回線「メガ・エッグ」の顧客情報の流出は確認されていない。","en":"Telecom operator Enecom found that part of its internal network had been breached and several files exfiltrated, possibly including customer data; scope under investigation. No leak of MEGA EGG fibre customers' data was found."},"sources":[{"title":"当社の社内ネットワークへの不正アクセスについて","publisher":"エネコム","date":"2026-10-09","url":"https://www.enecom.co.jp/information/3920/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"エネコム","en":"Enecom"},"group":"access"},{"id":"8660d49cef","date":"2026-10-09","occurred":"2026-01-01","disclosed":"2026-10-09","org":{"ja":"国内証券会社各社（2026年1〜6月の不正アクセス・不正取引）","en":"Japanese brokerages (unauthorised access and trading, Jan–Jun 2026)"},"sector":"finance","type":"account_takeover","via_vendor":false,"records":1437,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":null,"actor":null,"summary":{"ja":"証券口座の乗っ取りは2025年春のピークから減ったものの続いており、金融庁集計では2026年1〜6月に不正アクセス1,437件、不正取引749件、不正な売却約419億円が発生した。","en":"Brokerage account takeovers fell from their spring-2025 peak but continued. FSA data shows 1,437 unauthorised logins, 749 unauthorised trades and about ¥41.9bn of unauthorised sales in Jan–Jun 2026."},"sources":[{"title":"インターネット取引サービスへの不正アクセス・不正取引の発生状況（PDF）","publisher":"金融庁","date":"2026-10-09","url":"https://www.fsa.go.jp/ordinary/chuui/chuui_phishing/20261009.pdf"}],"confidence":"high","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"攻撃による漏えいの件数ではない（設定ミス・人為的ミス・件数の集計値）ため合計に含めない","en":"not added to totals: not records leaked by an attack (misconfiguration, human error, or a count of cases)"},"short":{"ja":"国内証券会社各社","en":"Japanese brokerages"},"group":"other"},{"id":"230b59cb46","date":"2026-10-12","occurred":"2026-10-06","disclosed":"2026-10-12","org":{"ja":"ヤマハ発動機（YAMAHA PAS Life／Commune経由）","en":"Yamaha Motor (YAMAHA PAS Life, via Commune)"},"sector":"manufacturing","type":"supply_chain","via_vendor":true,"records":1600,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"基盤提供会社Communeへの侵害","en":"Breach of platform provider Commune"},"actor":null,"summary":{"ja":"コミュニティサイトの基盤を提供するコミューンへの不正アクセスで、PAS Life会員約1600名分の氏名・住所・メールなどが閲覧された可能性がある。","en":"Via the Commune breach, about 1,600 PAS Life community members' names, addresses, emails and other data may have been accessed."},"sources":[{"title":"YAMAHA PAS Lifeにおける個人情報漏えいの可能性について","publisher":"ヤマハ発動機","date":"2026-10-12","url":"https://global.yamaha-motor.com/jp/news/2026/1012/leakage.html"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"ヤマハ発動機","en":"Yamaha Motor"},"group":"access"},{"id":"ebacecef7d","date":"2026-10-13","occurred":"2026-07-22","disclosed":"2026-10-13","org":{"ja":"京都教育大学","en":"Kyoto University of Education"},"sector":"education","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"6つのWebサイトを9月4日まで外部アクセス遮断","en":"Six websites blocked from external access until 4 Sep"},"vector":{"ja":"WordPressの脆弱性「wp2shell」（CVE-2026-60137、CVE-2026-63030）。PHPファイルを設置された","en":"WordPress vulnerability 'wp2shell' (CVE-2026-60137, CVE-2026-63030); PHP file planted"},"actor":null,"summary":{"ja":"WordPressの脆弱性wp2shellを突かれ、学部や附属学校の6サイトが一部改ざんされた。サーバーに個人情報はなく、漏えいは確認されていない。","en":"Attackers exploited the WordPress 'wp2shell' flaw to partially deface six faculty and affiliated-school sites. The server held no personal data and no leak was found."},"sources":[{"title":"本学ウェブサイトへの不正アクセスについて（お詫び）","publisher":"京都教育大学","date":"2026-10-13","url":"https://www.kyokyo-u.ac.jp/news/2026/10/web20260722-owabi.html"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"京都教育大学","en":"Kyoto University of Education"},"group":"access"},{"id":"fe6a02dcc7","date":"2026-10-13","occurred":"2026-08-10","disclosed":"2026-10-13","org":{"ja":"株式会社Fivot（IDARE）","en":"Fivot Inc. (IDARE)"},"sector":"finance","type":"unauthorized_access","via_vendor":false,"records":129659,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"顧客サポート業務で使う外部ソフトの脆弱性を突かれ、自社データベースへ到達","en":"Vulnerability in external software used for customer-support work, exploited to reach the company database"},"actor":null,"summary":{"ja":"キャッシュレスサービスIDAREで、顧客対応に使っていた外部ソフトの脆弱性が悪用され、8月10日〜9月27日に複数回データベースの情報が取得された。退会者を含む129,659人の連絡先や残高・取引履歴が対象。","en":"Attackers exploited a flaw in third-party customer-support software used by Fivot, IDARE's operator, and pulled database records several times between 10 Aug and 27 Sep. 129,659 users, including closed accounts, are affected, with contact details, balances and transaction history."},"sources":[{"title":"「IDARE」における不正アクセスによる個人情報漏えいに関するお知らせとお詫び","publisher":"株式会社Fivot","date":"2026-10-13","url":"https://idare.jp/news/1926/"},{"title":"キャッシュレスサービス「IDARE」で約13万件の情報漏えい　一部取引履歴も","publisher":"Impress Watch","date":"2026-10-14","url":"https://www.watch.impress.co.jp/docs/news/2148121.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"Fivot","en":"Fivot"},"group":"access"},{"id":"1108db29bf","date":"2026-10-13","occurred":"2026-08-29","disclosed":"2026-10-13","org":{"ja":"釧路市（委託先ポータス）","en":"Kushiro City (contractor Portas)"},"sector":"government","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"委託先の社内サーバーにランサムウェア","en":"Ransomware on contractor's internal server"},"actor":null,"summary":{"ja":"市立小中学校の学習端末を管理する委託先がランサムウェア攻撃を受け、児童生徒・教職員のアカウント名やパスワード、39校の管理用パスワードが漏えいした可能性がある。","en":"The contractor managing Kushiro's school learning devices was hit by ransomware; student and staff account names/passwords and admin passwords for 39 schools may have leaked."},"sources":[{"title":"委託業者のサーバーへの不正アクセスによる情報流出の可能性について","publisher":"釧路市","date":"2026-10-15","url":"https://www.city.kushiro.lg.jp/kosodatekyouiku/kyouiku/1008303/1019759.html"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"釧路市","en":"Kushiro City"},"group":"access"},{"id":"d7f376eed8","date":"2026-10-13","occurred":"2026-09-21","disclosed":"2026-10-13","org":{"ja":"DCMホールディングス株式会社（株式会社マイボフェローズ「マイボ」）","en":"DCM Holdings Co., Ltd. (MyBo Fellows, 'MyBo' membership service)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":419,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"2026年10月9日から「MyBoアプリ」の全サービスを停止。DCMアプリは影響なし","en":"All 'MyBo app' services suspended from 2026-10-09; DCM app not affected"},"vector":null,"actor":null,"summary":{"ja":"DCM子会社の会員サービス「マイボ」の会員管理システムが不正アクセスを受け、419人分の会員番号・メールアドレス・ポイント情報が漏えいした。","en":"The member-management system of MyBo, a DCM subsidiary's membership service, was accessed without authorization. Member numbers, emails and points data for 419 people leaked."},"sources":[{"title":"会員サービス「マイボ」における不正アクセスによる会員情報の漏えいに関するお詫びとお知らせ","publisher":"DCMホールディングス株式会社","date":"2026-10-13","url":"https://www.dcm-hc.co.jp/news/news_file/file/20261013nwes%20.pdf"},{"title":"[DCM マイボ unauthorized access article]","publisher":"Rocket Boys (Security Measures Lab)","date":"2026-10-13","url":"https://rocket-boys.co.jp/?p=43519"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"DCMホールディングス","en":"DCM Holdings"},"group":"access"},{"id":"f38718ebbe","date":"2026-10-13","occurred":"2026-10-05","disclosed":"2026-10-13","org":{"ja":"ライドオンエクスプレスホールディングス（銀のさら・釜寅・すし上等）","en":"Ride On Express HD (Gin no Sara, Kamatora, Sushi Joto)"},"sector":"retail_food","type":"supply_chain","via_vendor":true,"records":6500000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"公式サイトとアプリでの注文を停止（10月13日時点で再開日未定）。電話、出前館、Uber Eatsでの注文は継続","en":"Ordering via official websites and app stopped (no restart date as of 13 Oct); phone/Demaecan/Uber Eats orders continue"},"vector":{"ja":"会社のデータを預かるサーバー運営会社へのランサムウェア攻撃（運営会社名は非公表）","en":"Ransomware attack on the server operator hosting the company's data (operator not named)"},"actor":null,"summary":{"ja":"データを預けていたサーバー運営会社がランサムウェア攻撃を受け、銀のさらなどの顧客情報最大約650万件が漏えいした可能性がある。公式サイトとアプリの注文は停止した。","en":"The server operator holding Ride On Express's data was hit by ransomware; up to about 6.5M customer records for Gin no Sara and sister brands may have leaked. Web and app ordering was suspended."},"sources":[{"title":"当社サーバーへの不正アクセスに関するお知らせ（第3報）","publisher":"ライドオンエクスプレスホールディングス","date":"2026-10-13","url":"https://www.rideonexpresshd.co.jp/news/2026/10/3-33.html"},{"title":"【解説】銀のさら運営会社・アエナ・IDAREなど不正アクセス15件、10月13〜14日の公表を整理","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118908/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"銀のさら（ライドオンエクスプレス）","en":"Gin no Sara (Ride On Express)"},"group":"access"},{"id":"876688fc30","date":"2026-10-13","occurred":"2026-10-07","disclosed":"2026-10-13","org":{"ja":"東海旅客鉄道（JR東海MARKET・いいもの探訪）","en":"JR Central (JR Central MARKET, Iimono Tanbo)"},"sector":"logistics_transport","type":"supply_chain","via_vendor":true,"records":15000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"IDCFで運用するメール配信","en":"IDCF-hosted mail delivery"},"actor":null,"summary":{"ja":"IDCF上のメール配信環境経由で、通販サイト2つの約1万5000件のメールアドレスや送信メール本文中の氏名・住所等が漏えいした可能性がある。","en":"About 15,000 email addresses from two JR Central shopping sites, plus names/addresses contained in sent mail bodies, may have been exposed via an IDCF-hosted mail environment."},"sources":[{"title":"【解説】IDCFクラウド第5報「流出なし」、委託元はマウスやイズミなど「漏えいの可能性」を公表","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118902/"}],"confidence":"low","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"東海旅客鉄道","en":"JR Central"},"group":"access"},{"id":"4b8998d76a","date":"2026-10-13","occurred":"2026-10-07","disclosed":"2026-10-13","org":{"ja":"NTT ExCパートナー（LStepメール）","en":"NTT ExC Partner (LStep mail)"},"sector":"services","type":"supply_chain","via_vendor":true,"records":90000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"IDCFクラウド","en":"IDCF Cloud"},"actor":null,"summary":{"ja":"IDCFへの不正アクセスに伴い、学習サービスのメール配信で使うメールアドレス最大約9万件が漏えいした可能性がある。","en":"Up to about 90,000 email addresses used for LStep learning-service mail may have been exposed due to the IDCF incident."},"sources":[{"title":"IDCフロンティア社で発生した不正アクセスに伴うメールアドレス漏えいの可能性について","publisher":"NTT ExCパートナー","date":"2026-10-13","url":"https://www.nttexc.co.jp/news/detail20261013/"},{"title":"【解説】IDCFクラウド第5報「流出なし」、委託元はマウスやイズミなど「漏えいの可能性」を公表","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118902/"}],"confidence":"medium","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"NTT ExCパートナー","en":"NTT ExC Partner"},"group":"access"},{"id":"6e501fc63f","date":"2026-10-13","occurred":"2026-10-07","disclosed":"2026-10-13","org":{"ja":"スカパーJSAT（スカパー！メンバーズ）","en":"SKY Perfect JSAT (SKY PerfecTV! Members)"},"sector":"media_entertainment","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"販促メールを配信不可","en":"Promotional emails undeliverable"},"vector":{"ja":"外部のメール配信サービスを支えるIDCFクラウド","en":"IDCF cloud supporting an external email delivery service"},"actor":null,"summary":{"ja":"販促メール配信サービスを支えるIDCFのクラウド基盤への不正アクセスで、会員（一部退会者含む）のメールアドレスが漏えいした可能性がある。","en":"Unauthorized access to IDCF's cloud behind an email delivery service may have exposed members' (incl. some former members') email addresses."},"sources":[{"title":"IDCフロンティア社への不正アクセスに伴うメールアドレス漏えいの可能性について","publisher":"スカパーJSAT","date":"2026-10-13","url":"https://www.skyperfectjsat.space/jp/news/20261013"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"スカパーJSAT","en":"SKY Perfect JSAT"},"group":"access"},{"id":"2eba794bdf","date":"2026-10-13","occurred":"2026-10-08","disclosed":"2026-10-13","org":{"ja":"日本郵便（JP Business Tool Box）","en":"Japan Post (JP Business Tool Box)"},"sector":"logistics_transport","type":"misconfiguration","via_vendor":false,"records":4807,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"10月8日19:15にサービス全体が停止。10月9日16:15に大半の機能が復旧、ラベル注文機能は停止中","en":"Whole service stopped 8 Oct 19:15; most functions back 9 Oct 16:15; label-ordering function still stopped"},"vector":{"ja":"アプリの不具合により、他の顧客のラベル差出人データを閲覧できた（攻撃ではない）","en":"Application defect let customers view other customers' label sender data (not an attack)"},"actor":null,"summary":{"ja":"法人向けポータルのアプリ不具合により、送り状注文機能の発注元情報最大4807件が他の利用者から閲覧できる状態だった。","en":"An application bug in Japan Post's business portal let customers see other customers' label-order sender details; up to 4,807 records may have been viewed."},"sources":[{"title":"「JP Business Tool Box」におけるお客さま情報の漏えいのおそれについて","publisher":"日本郵便","date":"2026-10-13","url":"https://files.japanpost.jp/assets/34d9d11432734cfaa759e78fe395b688/f3f28b64a67841a1bd88dec64017f917/20261013_03_01.pdf"}],"confidence":"high","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"攻撃による漏えいの件数ではない（設定ミス・人為的ミス・件数の集計値）ため合計に含めない","en":"not added to totals: not records leaked by an attack (misconfiguration, human error, or a count of cases)"},"short":{"ja":"日本郵便","en":"Japan Post"},"group":"access"},{"id":"bbd7aa6222","date":"2026-10-13","occurred":"2026-10-09","disclosed":"2026-10-13","org":{"ja":"NEXT STAGE","en":"NEXT STAGE"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":40000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"BIツールのアカウントの悪用","en":"Misuse of a BI tool account"},"actor":null,"summary":{"ja":"BIツールのアカウントが不正利用され、最大約4万件の情報が漏えいした可能性がある。","en":"A BI-tool account was misused; up to about 40,000 records may have leaked."},"sources":[{"title":"【解説】銀のさら運営会社・アエナ・IDAREなど不正アクセス15件、10月13〜14日の公表を整理","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118908/"}],"confidence":"low","wave":true,"landmark":false,"short":{"ja":"NEXT STAGE","en":"NEXT STAGE"},"group":"access"},{"id":"4bfaf77a34","date":"2026-10-13","occurred":"2026-10-11","disclosed":"2026-10-13","org":{"ja":"株式会社アルカディア（SpeeCAN RAIDEN／ライデン・スクール／NET119／119RAIDEN）","en":"Arcadia Inc. (SpeeCAN RAIDEN, Raiden School, NET119, 119RAIDEN)"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":3136000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"SpeeCAN RAIDENとライデン・スクールを10月13日11:00に緊急停止、15日15:00ごろ復旧。36自治体が災害メールを停止（13日21:00時点）","en":"SpeeCAN RAIDEN (raiden3) and Raiden School (s2) emergency-stopped from 11:00 on 10-13 and restored around 15:00 on 10-15; 36 municipalities had suspended disaster-mail services as of 21:00 on 10-13 (MIC via Kyodo)"},"vector":null,"actor":null,"summary":{"ja":"自治体向け一斉配信サービスSpeeCAN RAIDENが不正アクセスを受け、メールアドレス約313万6千件などが漏えいした可能性がある。緊急通報NET119・119RAIDENにも不正アクセスの形跡があった。","en":"Arcadia's SpeeCAN RAIDEN mass-alert service for municipalities was breached, possibly exposing about 3.136 million email addresses and other data. Its NET119 and 119RAIDEN emergency-report services also showed signs of intrusion."},"sources":[{"title":"SpeeCAN RAIDENへの不正アクセスに伴う一連の対応について","publisher":"株式会社アルカディア","date":"2026-10-16","url":"https://www.arcadia.co.jp/info/4076"},{"title":"[SpeeCAN RAIDEN official blog: unauthorized-access reports no.1–10]","publisher":"株式会社アルカディア","date":"2026-10-16","url":"https://raiden.site.ktaiwork.jp/archives/4597"},{"title":"自治体防災メール 不正アクセスでアドレス300万件など漏えいか","publisher":"NHK","date":"2026-10-13","url":"https://news.web.nhk/newsweb/na/nd-20261013de58789"},{"title":"36自治体がサービス停止　防災情報の不正アクセス影響","publisher":"共同通信（熊本日日新聞）","date":"2026-10-14","url":"https://kumanichi.com/articles/2046336"},{"title":"防災メールの配信基盤「SpeeCAN RAIDEN」に不正アクセス、自治体は配信を止めるか続けるかで分かれる","publisher":"innovaTopia","date":"2026-10-14","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118857/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"アルカディア（SpeeCAN RAIDEN）","en":"Arcadia (SpeeCAN RAIDEN)"},"group":"access"},{"id":"6244bc8df8","date":"2026-10-13","occurred":"2026-10-11","disclosed":"2026-10-13","org":{"ja":"大分県","en":"Oita Prefecture"},"sector":"government","type":"supply_chain","via_vendor":true,"records":27667,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"10月13日16:25から防災メールの新規登録・変更・解除を停止。気象警報は継続","en":"New registrations, changes and cancellations on the disaster-mail system suspended from 16:25 on 10-13; weather alerts continue"},"vector":{"ja":"システム提供元（アルカディア、TOS・KSBの報道による。県のページには社名なし）で不正アクセス","en":"Unauthorized access at the system vendor (Arcadia, per TOS/KSB; the prefecture page does not name the vendor)"},"actor":null,"summary":{"ja":"大分県の防災メール等配信システムの委託業者が不正アクセスを受け、登録者のメールアドレス27,667件が漏えいした可能性がある。県職員の参集システム1万269件も対象と報じられた。","en":"The vendor running Oita Prefecture's disaster-alert mail system was breached, and 27,667 subscriber email addresses may have leaked. Media say 10,269 staff records in a mobilisation system are also affected."},"sources":[{"title":"不正アクセスの疑いに伴う防災メール等配信システムの新規登録等停止について","publisher":"大分県 防災対策企画課","date":"2026-10-13","url":"https://www.pref.oita.jp/soshiki/13550/bosaimeil.html"},{"title":"第三者が不正アクセスか　大分県の防災メールのシステム　メールアドレスなど4万件近くの個人情報漏えいか","publisher":"TOSテレビ大分","date":"2026-10-13","url":"https://tosonline.jp/news/20261013/00000003.html"},{"title":"複数自治体で個人情報漏洩か　配信システムに不正アクセス","publisher":"KSB瀬戸内海放送（ANN）","date":"2026-10-14","url":"https://news.ksb.co.jp/ann/article/16962190"},{"title":"システム業者への不正アクセスを受け、大分県で防災メール等配信システムの新規登録を停止","publisher":"ScanNetSecurity","date":"2026-10-16","url":"https://scan.netsecurity.ne.jp/article/2026/10/16/56482.html"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"大分県","en":"Oita Prefecture"},"group":"access"},{"id":"724a663bd3","date":"2026-10-13","occurred":null,"disclosed":"2026-10-13","org":{"ja":"東日本三菱自動車販売","en":"Higashi Nihon Mitsubishi Motor Sales"},"sector":"retail_food","type":"account_takeover","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"社員のMicrosoft 365アカウントへの不正ログイン","en":"Unauthorized login to an employee Microsoft 365 account"},"actor":null,"summary":{"ja":"社員のMicrosoft 365アカウントに不正ログインされ、なりすましメール825件が送信された。漏えい件数は調査中。","en":"An employee's Microsoft 365 account was accessed without authorization and used to send 825 spoofed emails; leak scope under investigation."},"sources":[{"title":"【解説】銀のさら運営会社・アエナ・IDAREなど不正アクセス15件、10月13〜14日の公表を整理","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118908/"}],"confidence":"low","wave":false,"landmark":false,"short":{"ja":"東日本三菱自動車販売","en":"Higashi Nihon Mitsubishi Motor Sales"},"group":"other"},{"id":"ffb025175c","date":"2026-10-13","occurred":null,"disclosed":"2026-10-13","org":{"ja":"JR九州フードサービス（トイポアプリ／委託先トイポ）","en":"JR Kyushu Food Service (Toipo app, vendor Toipo)"},"sector":"retail_food","type":"supply_chain","via_vendor":true,"records":26900,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"アプリ提供元トイポでの不正アクセス（innovaTopiaによるとAPI権限の不備）","en":"Unauthorized access at app vendor Toipo (innovaTopia: API permission flaw)"},"actor":null,"summary":{"ja":"顧客管理アプリを提供するトイポへの不正アクセスで、約2万6900名分の顧客情報が漏えいした可能性がある。","en":"Unauthorized access at app vendor Toipo may have exposed about 26,900 customers of JR Kyushu Food Service."},"sources":[{"title":"トイポアプリへの不正アクセスについて","publisher":"JR九州フードサービス","date":"2026-10-13","url":"https://www.jrfs.co.jp/news/365"},{"title":"【解説】銀のさら運営会社・アエナ・IDAREなど不正アクセス15件、10月13〜14日の公表を整理","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118908/"}],"confidence":"medium","wave":true,"landmark":false,"short":{"ja":"JR九州フードサービス","en":"JR Kyushu Food Service"},"group":"access"},{"id":"f655b534b7","date":"2026-10-13","occurred":"2026-10-11","disclosed":"2026-10-13","org":{"ja":"横須賀市（防災情報メール・防犯あんしんメール／SpeeCAN RAIDEN経由）","en":"Yokosuka City (disaster and crime alert mail, via SpeeCAN RAIDEN)"},"sector":"government","type":"supply_chain","via_vendor":true,"records":58920,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"防災情報メール・FAX・電話配信と防犯あんしんメールの4サービスを停止","en":"Disaster-information mail, fax and phone services and the crime-alert mail service stopped"},"vector":{"ja":"アルカディアの配信システム「SpeeCAN RAIDEN」への不正アクセス","en":"Unauthorized access to Arcadia's SpeeCAN RAIDEN alert delivery system"},"actor":null,"summary":{"ja":"横須賀市は、防災・防犯メールの配信に使うアルカディアの「SpeeCAN RAIDEN」が不正アクセスを受け、登録者の連絡先が漏えいした可能性があると発表した。防災情報メール47,065人、防犯あんしんメール10,848人などが対象で、4サービスを停止した。","en":"Yokosuka said Arcadia's SpeeCAN RAIDEN, which delivers its disaster and crime alerts, was breached and subscriber contact details may have leaked: 47,065 disaster-mail and 10,848 crime-alert addresses among others. Four services were stopped."},"sources":[{"title":"横須賀市防災情報メール及び防犯あんしんメール配信サービス等における不正アクセスに伴う個人情報の漏えいのおそれについて","publisher":"横須賀市","date":"2026-10-13","url":"https://www.city.yokosuka.kanagawa.jp/0525/nagekomi/20261013_roueinoosore.html"}],"confidence":"high","wave":true,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"横須賀市","en":"Yokosuka City"},"group":"access"},{"id":"ef6e6ed0be","date":"2026-10-14","occurred":"2026-07-11","disclosed":"2026-10-14","org":{"ja":"マッチングサイト「Lili」運営事務局","en":"Lili (matching site)"},"sector":"services","type":"unauthorized_access","via_vendor":false,"records":98256,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"プログラムの欠陥でサーバーに侵入され、パスワード解読プログラムを設置。10月11日に再侵入、偽のCloudflare「コマンド貼り付け」ページを挿入","en":"Program defect allowed server intrusion; password-decrypting program planted; second intrusion 11 Oct; fake Cloudflare 'paste this command' page injected"},"actor":null,"summary":{"ja":"サーバーに約3か月侵入され、会員最大約9万8256名のメール・パスワード（平文流出の可能性大）などと、最大7261名の本人確認書類画像が流出した可能性がある。偽のCloudflare認証画面も仕込まれた。","en":"Attackers sat on the server for about three months; up to ~98,256 members' emails and passwords (likely in plaintext) and up to 7,261 ID-document images may have leaked. A fake Cloudflare check page was also injected."},"sources":[{"title":"不正アクセスに関するお詫びとお知らせ","publisher":"Lili運営事務局","date":"2026-10-14","url":"https://lili-jo.com/notice/20261014.html"},{"title":"【解説】銀のさら運営会社・アエナ・IDAREなど不正アクセス15件、10月13〜14日の公表を整理","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118908/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"マッチングサイト「Lili」運営事務局","en":"Lili"},"group":"access"},{"id":"3433474ce8","date":"2026-10-14","occurred":"2026-10-07","disclosed":"2026-10-14","org":{"ja":"イズミ（ゆめオンライン・ゆめデリバリー）","en":"Izumi (Yume Online / Yume Delivery)"},"sector":"retail_food","type":"supply_chain","via_vendor":true,"records":400000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"IDCフロンティアの障害","en":"IDC Frontier incident"},"actor":null,"summary":{"ja":"IDCフロンティアでの不正アクセスに伴い、ネットスーパー等の利用者最大約40万件の氏名とメールアドレスが漏えいした可能性がある。","en":"Up to about 400,000 users' names and email addresses for Izumi's online supermarket services may have been exposed via the IDC Frontier incident."},"sources":[{"title":"IDCフロンティア社で発生した不正アクセスに伴うメールアドレス等の漏えいの可能性につきまして","publisher":"イズミ","date":"2026-10-14","url":"https://www.izumi.co.jp/news_release/idc.html"},{"title":"【解説】IDCFクラウド第5報「流出なし」、委託元はマウスやイズミなど「漏えいの可能性」を公表","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118902/"}],"confidence":"medium","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"イズミ","en":"Izumi"},"group":"access"},{"id":"784e39097c","date":"2026-10-14","occurred":"2026-10-07","disclosed":"2026-10-14","org":{"ja":"マウスコンピューター（メールマガジン）","en":"Mouse Computer (newsletter)"},"sector":"retail_food","type":"supply_chain","via_vendor":true,"records":420000,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"メールマガジンの配信を停止","en":"Newsletter delivery suspended"},"vector":{"ja":"メルマガ委託先が使うクラウド基盤（IDCフロンティア）","en":"Cloud platform (IDC Frontier) used by newsletter contractor"},"actor":null,"summary":{"ja":"メルマガ配信委託先が使うクラウド基盤への不正アクセスで、約42万件のメールアドレスと配信記録が漏えいした可能性がある。","en":"Unauthorized access to the cloud platform used by its newsletter contractor may have exposed about 420,000 email addresses and delivery records."},"sources":[{"title":"メールアドレス漏えいの可能性およびメールマガジン配信一時停止のお知らせ","publisher":"マウスコンピューター","date":"2026-10-14","url":"https://www2.mouse-jp.co.jp/ssl/user_support2/info.asp?N_ID=535"},{"title":"【解説】IDCFクラウド第5報「流出なし」、委託元はマウスやイズミなど「漏えいの可能性」を公表","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118902/"}],"confidence":"medium","wave":false,"landmark":false,"counts_toward_total":false,"records_note":{"ja":"委託先・基盤側の件数と重複、または漏えい未確認のため合計に含めない","en":"not added to totals: overlaps the vendor's count or no leak confirmed"},"short":{"ja":"マウスコンピューター","en":"Mouse Computer"},"group":"access"},{"id":"d268bbadd8","date":"2026-10-14","occurred":"2026-10-07","disclosed":"2026-10-14","org":{"ja":"ピーチ・ジョン（メールマガジン）","en":"PEACH JOHN (newsletter)"},"sector":"retail_food","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"メールマガジンの配信を停止","en":"Newsletter delivery suspended"},"vector":{"ja":"IDCFクラウド","en":"IDCF Cloud"},"actor":null,"summary":{"ja":"IDCF経由でメルマガ会員のメールアドレスが漏えいした可能性がある。","en":"Newsletter subscribers' email addresses may have been exposed via IDCF."},"sources":[{"title":"【解説】IDCFクラウド第5報「流出なし」、委託元はマウスやイズミなど「漏えいの可能性」を公表","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118902/"}],"confidence":"low","wave":false,"landmark":false,"short":{"ja":"ピーチ・ジョン","en":"PEACH JOHN"},"group":"access"},{"id":"7a973ebb4b","date":"2026-10-14","occurred":"2026-10-11","disclosed":"2026-10-14","org":{"ja":"メドレー（アットリンク）","en":"Medley (at-link maternity clinic app)"},"sector":"healthcare","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"10月15日0:00から「at-link」アプリ、Web予約などの関連サービスを停止。再開日未定","en":"at-link app, web booking and related services suspended from 15 Oct 00:00; no restart date"},"vector":{"ja":"第三者による不正アクセスの可能性（調査中）","en":"Possible third-party unauthorized access (under investigation)"},"actor":null,"summary":{"ja":"産婦人科向けアプリ「アットリンク」で第三者による不正アクセスの可能性が確認され、アプリやWEB予約などが一時停止された。個人情報への影響は調査中。","en":"Medley found possible unauthorized access to its at-link maternity-clinic system and suspended the app and web booking; impact on personal data is under investigation."},"sources":[{"title":"アットリンクアプリ、WEB予約サイトおよび周辺サービスの一時停止に関するお詫び（まつしま病院お知らせ掲載）","publisher":"まつしま病院（メドレー告知）","date":"2026-10-14","url":"https://www.matsushima-wh.or.jp/news/"},{"title":"【解説】銀のさら運営会社・アエナ・IDAREなど不正アクセス15件、10月13〜14日の公表を整理","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118908/"}],"confidence":"medium","wave":true,"landmark":false,"short":{"ja":"メドレー","en":"Medley"},"group":"access"},{"id":"d9f44996fe","date":"2026-10-14","occurred":"2026-10-11","disclosed":"2026-10-14","org":{"ja":"日テレWands（FaveConnect）","en":"NTV Wands (FaveConnect fan-site platform)"},"sector":"media_entertainment","type":"unauthorized_access","via_vendor":false,"records":117392,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"第三者がファンサイトの管理者アカウントでログイン","en":"Third party logged in with a fan-site administrator account"},"actor":null,"summary":{"ja":"ファンサイト基盤FaveConnectの管理者アカウントで第三者にログインされ、2サービス計11万7392アカウントの氏名・住所・連絡先などが閲覧された可能性がある。","en":"A third party logged in with an administrator account on the FaveConnect fan-site platform; 117,392 accounts across two fan services (name, address, contact details etc.) may have been viewed."},"sources":[{"title":"FaveConnectにおける不正アクセスについて","publisher":"日テレWands","date":"2026-10-14","url":"https://www.ntv-wands.co.jp/news/articles/pbs9b02rgl3oubrj.html"},{"title":"【解説】銀のさら運営会社・アエナ・IDAREなど不正アクセス15件、10月13〜14日の公表を整理","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118908/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"日テレWands","en":"NTV Wands"},"group":"access"},{"id":"b87a15db47","date":"2026-10-14","occurred":"2026-10-13","disclosed":"2026-10-14","org":{"ja":"アエナ（ECアプリ）","en":"Aena (EC app)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":817215,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"緊急措置としてECサイトへのアクセスを遮断","en":"EC site access blocked as emergency measure"},"vector":{"ja":"会員マイページへの自動化された連続アクセス","en":"Automated continuous access to member My Pages"},"actor":null,"summary":{"ja":"ECアプリのマイページへの機械的な連続アクセスにより、最大81万7215人分の氏名・住所・連絡先やカード下4桁などが閲覧された可能性がある。","en":"Automated, repeated access to Aena's EC-app My Pages may have exposed up to 817,215 members' names, addresses, contact details and partial card data (last 4 digits, expiry)."},"sources":[{"title":"ECアプリへの不正アクセスに関するお詫びとお知らせ","publisher":"アエナ","date":"2026-10-14","url":"https://www.aena.co.jp/news/detail/7826/"},{"title":"【解説】銀のさら運営会社・アエナ・IDAREなど不正アクセス15件、10月13〜14日の公表を整理","publisher":"innovaTopia","date":"2026-10-15","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118908/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"アエナ","en":"Aena"},"group":"access"},{"id":"0793c63862","date":"2026-10-14","occurred":null,"disclosed":"2026-10-14","org":{"ja":"TOPPANペイメンツ","en":"TOPPAN Payments"},"sector":"finance","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"決済データのダウンロードと加盟店ポータルの機能を停止。10月6日、10日に段階再開、検索機能は10月下旬","en":"Settlement-data download and merchant portal functions suspended; phased restart 6 Oct, 10 Oct, search functions late Oct"},"vector":{"ja":"記載なし。データベースのテーブル名一覧を閲覧した痕跡","en":"Not stated; traces of viewing the database table-name list"},"actor":null,"summary":{"ja":"決済情報ダウンロードサイト等への不正アクセス調査で、DB構造（テーブル名一覧）の参照痕跡はあったが、顧客情報へのアクセスはなく漏えいはないと判断した。","en":"An investigation into unauthorized access to TOPPAN Payments' settlement-download and merchant portal found traces of the database table list being viewed but no access to customer records, so no leak."},"sources":[{"title":"不正アクセスに関する調査結果について","publisher":"TOPPANペイメンツ","date":"2026-10-14","url":"https://thincacloud.toppan.com/newsrelease/20261014/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"TOPPANペイメンツ","en":"TOPPAN Payments"},"group":"access"},{"id":"f1c27c1035","date":"2026-10-15","occurred":"2026-09-11","disclosed":"2026-10-15","org":{"ja":"ACCESS（子会社ACCESS AP TAIWAN「CROS」）","en":"ACCESS Co. (subsidiary ACCESS AP Taiwan, CROS)"},"sector":"it_cloud","type":"supply_chain","via_vendor":true,"records":155280,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"顧客1社に提供したBIツールが侵入口（アプリケーションレベルのアクセス）","en":"BI tool provided to one client was the entry point (application-level access)"},"actor":null,"summary":{"ja":"台湾子会社の越境EC支援サービスCROSで、1社向けBIツールを起点に不正アクセスされ、台湾・香港等の顧客15万5280件の個人情報や一部カード情報が流出した。","en":"ACCESS's Taiwan subsidiary's cross-border EC service CROS was breached via a BI tool supplied to one client; 155,280 customer IDs (Taiwan, HK, Macao, Singapore) and some card data for unpaid orders leaked."},"sources":[{"title":"連結子会社における不正アクセスの発生及び個人情報漏洩に関するお知らせ","publisher":"ACCESS","date":"2026-10-15","url":"https://www.access-company.com/files/2026/10/n261015.pdf"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ACCESS","en":"ACCESS Co."},"group":"access"},{"id":"fb02b16ee2","date":"2026-10-15","occurred":"2026-09-16","disclosed":"2026-10-15","org":{"ja":"工房（発車オーライネット）","en":"Kobo (Hassha Orai Net bus booking)"},"sector":"logistics_transport","type":"unauthorized_access","via_vendor":false,"records":5614,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"提携先との連携に使うAPIサーバーへの不正アクセス","en":"Unauthorized access to API server used for partner integrations"},"actor":null,"summary":{"ja":"高速バス予約サイトの外部連携用APIサーバーが不正アクセスを受け、5614人分の予約名（カナ）・電話番号・乗車日・路線などが漏えいした可能性がある。","en":"The partner-integration API server of bus booking site Hassha Orai Net was accessed without authorization; 5,614 people's (8,341 bookings) katakana names, phone numbers and trip details may have leaked."},"sources":[{"title":"不正アクセスに関するお知らせ","publisher":"工房（発車オーライネット）","date":"2026-10-15","url":"https://secure.j-bus.co.jp/hon/News?code=1"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"工房","en":"Kobo"},"group":"access"},{"id":"bacef7c195","date":"2026-10-15","occurred":"2026-10-02","disclosed":"2026-10-15","org":{"ja":"ビーケー・ジャパン（バーガーキング公式アプリ）","en":"BK Japan (Burger King Japan official app)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":11180000,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"アプリの会員管理システムへの第三者による不正アクセス（原因は調査中）","en":"Third-party unauthorized access to the app member-management system (cause under investigation)"},"actor":null,"summary":{"ja":"バーガーキング公式アプリの会員管理システムが10月2日〜7日に不正アクセスを受け、約1118万件の会員ID・氏名・電話番号・生年月日などが漏えいした。カード番号は保持していない。","en":"Burger King Japan's app member system was accessed without authorization from 2 to 7 October, leaking about 11.18M records (member ID, name, phone, birth date etc.). No card numbers were held."},"sources":[{"title":"不正アクセスによる公式アプリ会員情報漏えいに関するお詫びとお知らせ","publisher":"ビーケー・ジャパン","date":"2026-10-15","url":"https://www.burgerking.co.jp/images/notice/2026/10/15/d4d114ca-ebd7-4f3d-94ef-c4ea7a84a139.pdf"},{"title":"バーガーキング、公式アプリの会員情報約1118万件が不正アクセスにより漏えい","publisher":"INTERNET Watch","date":"2026-10-15","url":"https://internet.watch.impress.co.jp/docs/news/2148458.html"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"バーガーキング","en":"Burger King Japan"},"group":"access"},{"id":"9377778fa0","date":"2026-10-15","occurred":"2026-10-09","disclosed":"2026-10-15","org":{"ja":"ソースネクスト","en":"SOURCENEXT Corporation"},"sector":"it_cloud","type":"unauthorized_access","via_vendor":false,"records":22519960,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"会員情報取得APIの悪用","en":"Abuse of the member-information retrieval API"},"actor":null,"summary":{"ja":"会員情報取得APIが不正利用され、最大2251万9960件の会員のメール・パスワード・氏名・住所などが流出した可能性がある。全会員のパスワードを強制変更した。","en":"SOURCENEXT's member-information API was abused; up to 22,519,960 members' emails, passwords, names, addresses and more may have leaked. All passwords were force-reset."},"sources":[{"title":"不正アクセスによる個人情報流出に関するお詫びとお知らせ","publisher":"ソースネクスト","date":"2026-10-15","url":"https://www.sourcenext.com/support/i/2026/1015_info/"},{"title":"ソースネクスト、不正アクセスでパスワード含む会員の個人情報最大約2252万件が流出","publisher":"INTERNET Watch","date":"2026-10-16","url":"https://internet.watch.impress.co.jp/docs/news/2148588.html"},{"title":"ソースネクストで最大2252万件流出、ベネッセに次ぐ「歴代2位」","publisher":"ITmedia ビジネスオンライン","date":"2026-10-15","url":"https://www.itmedia.co.jp/business/articles/2610/15/news102.html"},{"title":"会員情報約2252万件が流出した可能性 - ソースネクスト","publisher":"Security NEXT","date":"2026-10-16","url":"https://www.security-next.com/191549"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ソースネクスト","en":"SOURCENEXT"},"group":"access"},{"id":"e45de996d2","date":"2026-10-15","occurred":"2026-10-10","disclosed":"2026-10-15","org":{"ja":"ビューティガレージ","en":"Beauty Garage"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":775725,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"ECサイトのサーバーへの不正な攻撃（手口は非公表）","en":"Unauthorized attack on EC-site server (method not disclosed)"},"actor":null,"summary":{"ja":"EC サイトのサーバーが攻撃を受け、77万5725件の顧客情報（サロン名・氏名・連絡先・パスワードのハッシュ値など）が流出した。","en":"Beauty Garage's e-commerce server was attacked and 775,725 customer records (salon name, name, contacts, password hashes) were taken."},"sources":[{"title":"不正アクセスによるお客様情報の流出に関するお詫びとお知らせ","publisher":"ビューティガレージ","date":"2026-10-15","url":"https://www.beautygarage.jp/topics/news_unauthorizedaccess2026"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ビューティガレージ","en":"Beauty Garage"},"group":"access"},{"id":"d3faf39ed3","date":"2026-10-15","occurred":"2026-10-14","disclosed":"2026-10-15","org":{"ja":"大和総研（内藤証券向けFinancial Plate/WB4）","en":"Daiwa Institute of Research (Financial Plate/WB4 for Naito Securities)"},"sector":"finance","type":"unauthorized_access","via_vendor":false,"records":631,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"Webサーバーの一時的なログインセッション用データベースへの不正アクセス","en":"Unauthorized access to web server's temporary login-session database"},"actor":null,"summary":{"ja":"大和総研が運用を受託する内藤証券のネット取引システムのWebサーバーが不正アクセスを受け、ログイン中だった最大631名の口座番号などが漏えいした可能性がある。","en":"The web server of Naito Securities' online trading system, run by DIR, was accessed without authorization; up to 631 logged-in users' details (incl. account and withdrawal bank numbers) may have leaked."},"sources":[{"title":"当社運用システムへの不正アクセスによる個人情報漏えいの可能性について","publisher":"大和総研","date":"2026-10-15","url":"https://www.dir.co.jp/release/2026101501.pdf"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"大和総研","en":"Daiwa Institute of Research"},"group":"access"},{"id":"54fd742781","date":"2026-10-15","occurred":"2026-10-14","disclosed":"2026-10-15","org":{"ja":"エムスリー（MR君）","en":"M3, Inc. (MR-kun)"},"sector":"healthcare","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"第三者による不正アクセス（原因は調査中）","en":"Third-party unauthorized access (cause under investigation)"},"actor":null,"summary":{"ja":"製薬企業向けサービス「MR君」が不正アクセスを受け、医師会員の一部（全体の1割未満）と製薬企業担当者数百名の氏名・勤務先・メールなどが漏えいした。","en":"M3's pharma-facing 'MR-kun' service was breached; names, workplaces and some emails of a portion of doctor members (under 10% of all) and several hundred pharma contacts leaked."},"sources":[{"title":"不正アクセスによる個人情報漏えいに関するお詫びとお知らせ","publisher":"エムスリー","date":"2026-10-15","url":"https://corporate.m3.com/assets.ctfassets.net/1pwj74siywcy/4YBQ3JACTocGVgQmIVkSHe/bed9ff0b11db690e1217e0329c484104/20261015_Public_J.pdf"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"エムスリー","en":"M3"},"group":"access"},{"id":"73c76e617b","date":"2026-10-15","occurred":null,"disclosed":"2026-10-15","org":{"ja":"NTTソルマーレ（コミックシーモア）","en":"NTT Solmare (Comic C'moA)"},"sector":"media_entertainment","type":"unauthorized_access","via_vendor":false,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"「コミックシーモア」のストア・読み放題・レビュー機能を10月15日から停止（再開日未定）","en":"Comic C'moA store/subscription/review functions suspended from 15 Oct (no restart date)"},"vector":{"ja":"サーバーへの外部からの不正アクセスの可能性が高い（調査中）","en":"Likely unauthorized external access to servers (under investigation)"},"actor":null,"summary":{"ja":"電子書籍ストア「コミックシーモア」のサーバーに不正アクセスが行われた可能性が高いとして、10月15日にサービスを緊急停止した。影響範囲は調査中。","en":"NTT Solmare halted its Comic C'moA e-book store on 15 October after judging unauthorized access to its servers likely; scope under investigation."},"sources":[{"title":"『コミックシーモア』サービス停止に関するお知らせ","publisher":"NTTソルマーレ","date":"2026-10-15","url":"https://www.nttsolmare.com/press/2026/0616-1.html"},{"title":"【解説】エムスリー・ACCESS・大和総研など不正アクセス11件、10月15日の公表を整理","publisher":"innovaTopia","date":"2026-10-16","url":"https://innovatopia.jp/cyber-security/cyber-security-news/118934/"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"NTTソルマーレ","en":"NTT Solmare"},"group":"access"},{"id":"357c0388cc","date":"2026-10-16","occurred":"2026-10-03","disclosed":"2026-10-16","org":{"ja":"ファンケル（ファンケル／アテニアのオンラインショップ）","en":"FANCL (FANCL and Attenir online shops)"},"sector":"retail_food","type":"unauthorized_access","via_vendor":false,"records":785496,"affected_orgs":null,"cost_jpy":null,"outage":null,"vector":{"ja":"10月3日から10日にかけてファンケル・アテニアのECサイトが不正アクセスを受けた（攻撃の詳細は非開示）","en":"Unauthorized access to the FANCL and Attenir e-commerce sites (3–10 Oct); attack details withheld"},"actor":null,"summary":{"ja":"ファンケルとアテニアは、両社のECサイトが10月3日から10日にかけて不正アクセスを受け、会員計785,496人（834,947件）の氏名・住所・電話番号・生年月日などが漏えいしたと発表した。決済情報は含まれない。","en":"FANCL and Attenir said their e-commerce sites were accessed without authorization between 3 and 10 Oct, leaking data of 785,496 members (834,947 records): names, addresses, phone numbers, dates of birth and more. No payment data was involved."},"sources":[{"title":"第三者による不正アクセスに伴う個人情報漏えいに関するお詫びとお知らせ","publisher":"ファンケル・アテニア","date":"2026-10-16","url":"https://www.fancl.jp/news/pdf/husei.pdf"},{"title":"ファンケル 不正アクセスで個人情報78万人余が外部流出","publisher":"NHK","date":"2026-10-16","url":"https://news.web.nhk/newsweb/na/nd-20261016de60600"}],"confidence":"high","wave":true,"landmark":false,"short":{"ja":"ファンケル","en":"FANCL"},"group":"access"},{"id":"7d62219148","date":"2026-10-16","occurred":"2026-10-15","disclosed":"2026-10-16","org":{"ja":"三井住友DSアセットマネジメント（三井住友DS投信直販ネット／取引委託業者）","en":"Sumitomo Mitsui DS Asset Management (direct-sales site, via trading contractor)"},"sector":"finance","type":"supply_chain","via_vendor":true,"records":null,"affected_orgs":null,"cost_jpy":null,"outage":{"ja":"10月15日19時50分頃から16日6時頃までマイページにログインできない状態","en":"My Page login unavailable from about 19:50 on 15 Oct to 06:00 on 16 Oct"},"vector":{"ja":"取引委託業者のシステムで不正アクセスを検知し、予防的にシステムを停止","en":"Unauthorized access detected at the trading contractor's system; system stopped as a precaution"},"actor":null,"summary":{"ja":"三井住友DSアセットマネジメントは、投信直販ネットの取引委託業者のシステムで不正アクセスが検知され、予防的な停止で約10時間マイページにログインできなかったと発表した。口座情報や取引への影響は確認されていない。","en":"Sumitomo Mitsui DS Asset Management said an intrusion was detected at the contractor running trades for its direct-sales site; a precautionary shutdown blocked My Page logins for about 10 hours. No impact on accounts or trades was found."},"sources":[{"title":"三井住友DS投信直販ネットのマイページ一時利用停止のお詫びと復旧のお知らせ","publisher":"三井住友DSアセットマネジメント","date":"2026-10-16","url":"https://www.smd-am.co.jp/news/news/2026/news_20261016/"}],"confidence":"high","wave":false,"landmark":false,"short":{"ja":"三井住友DSアセットマネジメント","en":"Sumitomo Mitsui DS AM"},"group":"access"}]}