{ "response": [ { "Event": { "uuid": "8ad2b15f-6e0f-5e73-81aa-0bd1fb461e66", "info": "Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise", "date": "2026-11-12", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/japan-pushes-emergency-funding-for-cybersecurity-as-ai-assisted-breach-20261112/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.darkreading.com/cybersecurity-operations/japan-emergency-funding-cybersecurity-ai-assisted-breaches", "comment": "Dark Reading", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Dark Reading), Nov 12, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "4a720040-e5b1-5086-a514-068810e13af7", "info": "Cyberattacks hit a third of Japan firms or their service providers this year: Reuters poll", "date": "2026-11-11", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/cyberattacks-hit-a-third-of-japan-firms-or-their-service-providers-thi-20261111/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.channelnewsasia.com/business/cyberattacks-hit-third-japan-firms-or-their-service-providers-year-reuters-poll-6544086", "comment": "Channel News Asia", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Nov 11, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "256e7afa-4394-5775-a2d4-f24fe398aecb", "info": "Unauthorized access to Nitori; possibility of up to 37.62 million pieces of personal information leaked", "date": "2026-11-09", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/3762-20261109/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261109de73045", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Nov 9, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 37,620,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "bbdd10ae-6a90-5348-a4bb-88035c120d7e", "info": "SEGA newsletter data breach exposes 2.2 million email addresses", "date": "2026-11-09", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Media\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/sega-newsletter-data-breach-exposes-22-million-email-addresses-20261109/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.bleepingcomputer.com/news/security/sega-newsletter-data-breach-exposes-22-million-email-addresses/", "comment": "BleepingComputer", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (BleepingComputer), Nov 9, 2026. Type: data breach; sectors: media. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 2,200,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "da67f9be-8ce0-5fe9-ab46-4b945ed323fa", "info": "Unauthorized access to 'RAKSUL'; risk of leakage of printing data and other information", "date": "2026-11-09", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261109/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261109de72879", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Nov 9, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "40183757-45cf-5388-99e8-de1c0b33bf46", "info": "Iris Ohyama data cloud breach exposes info of 7.7 million customers", "date": "2026-11-08", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Technology\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers-20261108/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/", "comment": "BleepingComputer", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (BleepingComputer), Nov 8, 2026. Type: data breach; sectors: technology. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 7,700,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "e1bce9d5-7544-5ad3-9509-b73b2b07b962", "info": "Double Trouble: Japan Data Breaches Expose 260 Million Personal Info Records", "date": "2026-11-06", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/double-trouble-japan-data-breaches-expose-260-million-personal-info-re-20261106/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.nippon.com/en/articles/-/56881", "comment": "Nippon.com", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Nippon.com), Nov 6, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 260,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "9db6fd6d-46ec-50fe-bc83-1670e3002c43", "info": "Possibility of unauthorized access to Docomo; online services suspended", "date": "2026-11-05", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261105/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261105de70776", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Nov 5, 2026. Title machine-translated from Japanese. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "25313f72-c634-51e7-8da5-ef48f0cd9f4a", "info": "Japan Post partially suspends overseas delivery service 'UGX' due to cyberattack", "date": "2026-11-04", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/japan-post-partially-suspends-overseas-delivery-service-ugx-due-to-cyb-20261104/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261105de70691", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Nov 4, 2026. Title machine-translated from Japanese. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "39d3f6b1-b126-5c8e-b9cb-e4794959e4bb", "info": "More data breaches hit Japan, including leak of 77 million email addresses", "date": "2026-11-03", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/more-data-breaches-hit-japan-including-leak-of-77-million-email-addres-20261103/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/11/03/japan/society/japan-firms-report-more-data-breaches/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Nov 3, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 77,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "1cf42061-42fa-5d7a-a7d3-9c6273a9b946", "info": "Nojima leaks approximately 7 million pieces of personal information due to unauthorized access", "date": "2026-11-02", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/700-20261102/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261102de69780", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Nov 2, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 7,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "b63138ca-e9ab-53b1-bff9-5c5113d97398", "info": "Potential leak of personal information for up to approximately 5.49 million 'NetMile' users", "date": "2026-11-02", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/549-20261102/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261102de69784", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Nov 2, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 5,490,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "d8d6da77-9ccb-5d99-b369-7daa49c6ed19", "info": "Suntory, other companies report personal data leaked", "date": "2026-11-02", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/suntory-other-companies-report-personal-data-leaked-20261102/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/business/suntory-holdings-says-personal-data-of-around-100-000-people-leaked", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Japan Today), Nov 2, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "b3f7e2b0-12a7-5a29-97bd-dda9ed7b18a3", "info": "North Korean hackers behind Japan’s massive GMO data leak, investigation finds", "date": "2026-11-01", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/chinese-ai-tool-behind-cyberattacks-in-japan-security-firm-20261020/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.channelnewsasia.com/east-asia/china-ai-tool-artex-japan-cyberattack-6474611", "comment": "Channel News Asia", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/crime/update2-security-firm-finds-china-linked-ai-agent-behind-japan-cyberattacks", "comment": "Japan Today", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261021de62520", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.taipeitimes.com/News/world/archives/2026/10/21/2003866365", "comment": "Taipei Times", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261023de64076", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261024de64764", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://ec.ltn.com.tw/article/breakingnews/5618952", "comment": "Liberty Times", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/28/japan/crime-legal/gmo-hacker-website-shutdown/", "comment": "The Japan Times", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261101de69281", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.scmp.com/news/asia/east-asia/article/3372913/north-korea-hackers-behind-japans-massive-gmo-data-leak-investigation-finds", "comment": "South China Morning Post", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 2 articles in 2 outlets (NHK, South China Morning Post), Nov 1 to Nov 2, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "6930bf9a-1ff8-573e-aeef-2212c782a9a9", "info": "Foreign ministry says 3,600 sets of personal information may have been leaked", "date": "2026-10-31", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Government\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/foreign-ministry-says-3600-sets-of-personal-information-may-have-been-20261031/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/31/japan/foreign-ministry-data-leak/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 31, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "8e9aad2c-d131-54b1-bb70-6b20db312106", "info": "Club Tourism: Approximately 4.32 million pieces of personal information leaked due to unauthorized access", "date": "2026-10-31", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/432-20261031/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261031de69034", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 31, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 4,320,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "fc7fbe34-117f-5a56-9dc8-93808d7a4222", "info": "Unauthorized access to NTT Data contractor; possibility of corporate bond purchaser information leak", "date": "2026-10-31", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/ntt-20261031/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261031de68967", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 31, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "a967416f-84ac-5091-9236-eec7739030c4", "info": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack", "date": "2026-10-30", "threat_level_id": "1", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"hong kong\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:country=\"malaysia\"" }, { "name": "misp-galaxy:country=\"singapore\"" }, { "name": "misp-galaxy:country=\"thailand\"" }, { "name": "misp-galaxy:sector=\"Transportation\"" }, { "name": "misp-galaxy:sector=\"Technology\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/cathay-pacific-says-data-from-53000-bookings-compromised-in-amadeus-cy-20261030/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.scmp.com/news/hong-kong/transport/article/3372722/cathay-pacific-says-data-53000-bookings-compromised-amadeus-cyberattack", "comment": "South China Morning Post", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.malaymail.com/news/malaysia/2026/11/01/malaysia-airlines-warns-customers-of-data-exposure-in-amadeus-cybersecurity-breach/241516", "comment": "Malay Mail", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.straitstimes.com/singapore/46000-sia-booking-records-accessed-illegally-in-data-breach-affecting-software-provider-amadeus", "comment": "The Straits Times", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.channelnewsasia.com/singapore/sia-singapore-airlines-amadeus-data-breach-booking-records-6517151", "comment": "Channel News Asia", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.matichon.co.th/economy/news_5969157", "comment": "Matichon", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.bangkokpost.com/thailand/general/3352180/60000-thai-bookings-compromised-in-amadeus-breach", "comment": "Bangkok Post", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://thethaiger.com/news/world/aviation/thai-airways-confirms-passenger-data-leak-but-credit-card-details-safe", "comment": "The Thaiger", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.matichon.co.th/economy/news_5969937", "comment": "Matichon", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 8 articles in 7 outlets (Bangkok Post, Channel News Asia, Malay Mail, Matichon, South China Morning Post, The Straits Times and others), Oct 30 to Nov 10, 2026. Type: data breach; sectors: transportation, technology. Asia-Pacific countries affected: Thailand, Japan, Singapore, Hong Kong, Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "da4486a6-8e50-55a2-ac09-6542436a1c4e", "info": "Foreign Ministry hit by hacking, along with ANA, Muji brand operator", "date": "2026-10-30", "threat_level_id": "1", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Government\"" }, { "name": "misp-galaxy:sector=\"Media\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/foreign-ministry-hit-by-hacking-along-with-ana-muji-brand-operator-20261030/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/crime/update3-japan-foreign-ministry-hit-by-hacking-along-with-ana-muji-brand-operator", "comment": "Japan Today", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://newtalk.tw/news/view/2026-11-04/1069337", "comment": "New Talk", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261112de74562", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://newtalk.tw/news/view/2026-11-12/1070830", "comment": "New Talk", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 4 articles in 3 outlets (Japan Today, NHK, New Talk), Oct 30 to Nov 12, 2026. Type: data breach; sectors: government, media. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 1,090,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "b9a7f62c-9600-5e71-b370-f255d6e26170", "info": "Matsuya Foods detects unauthorized access, suspends website and app", "date": "2026-10-29", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Technology\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/hp-20261029/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261029de67623", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 29, 2026. Title machine-translated from Japanese. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "1419d5f6-ca36-59a0-b0c1-9a2e6853f659", "info": "Asahi Shimbun: Unauthorized access to email distribution company may have leaked over 70,000 items", "date": "2026-10-29", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/7-20261029/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261030de68144", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 29, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 70,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "e888d447-941b-5631-b34e-86281a40d8ca", "info": "Life Card: Over 330,000 customer email addresses and other data potentially leaked", "date": "2026-10-29", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/life-card-over-330000-customer-email-addresses-and-other-data-potentia-20261029/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261029de67594", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 29, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 330,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "6eaedb7e-8c4f-5584-8536-a70622bc04a5", "info": "Unauthorized access to Japan Airlines reservation system, information of over 90,000 people may have been leaked", "date": "2026-10-28", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Transportation\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/9-20261028/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261028de67365", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 28, 2026. Title machine-translated from Japanese. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 90,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "a70aa50a-1738-5065-a9a1-263628d23813", "info": "Okinawa Tourist announces leak of personal information of up to approximately 730,000 people", "date": "2026-10-27", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/73-20261027/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261027de66245", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 27, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 730,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "52d70ddd-bbea-5586-8bd5-27cab8296f37", "info": "Government holds urgent cybersecurity meeting in response to recent data breaches", "date": "2026-10-26", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Government\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/government-holds-urgent-cybersecurity-meeting-in-response-to-recent-da-20261026/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/26/japan/japan-government-cybersecurity/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 26, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "59ebb471-b4d4-58cb-b59c-f41ac1ee87f6", "info": "Email distribution company 'Yumirlink' confirms data leak of 51 million records", "date": "2026-10-26", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/5100-20261026/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261026de65955", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 26, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 51,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "66ec61b2-f799-5529-afed-903797854930", "info": "Unauthorized access to electronic gift company; 550 million yen worth issued fraudulently", "date": "2026-10-26", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/55000-20261026/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261026de66013", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 26, 2026. Title machine-translated from Japanese. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 550,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "644befdd-5b3c-5b4f-ae85-c29a0e8a8661", "info": "Japan companies to compensate customers after major cyberattacks", "date": "2026-10-26", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/japan-companies-to-compensate-customers-after-major-cyberattacks-20261026/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.scmp.com/news/asia/east-asia/article/3372105/japan-companies-compensate-customers-after-major-cyberattacks", "comment": "South China Morning Post", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Oct 26, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "bd8f0c80-f7a9-50b7-b14d-80e3d02bffdf", "info": "Japanese companies offer compensation as cyberattacks hit economy", "date": "2026-10-26", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/japanese-companies-offer-compensation-as-cyberattacks-hit-economy-20261026/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.freemalaysiatoday.com/category/business/2026/10/26/japanese-companies-offer-compensation-as-cyberattacks-hit-economy", "comment": "Free Malaysia Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Free Malaysia Today), Oct 26, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "251710a8-cc76-570b-8480-1ee0da4704db", "info": "Rakuten Travel suffers unauthorized access, leaking names and partial credit card numbers", "date": "2026-10-26", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261026-2/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261026de66040", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.ltn.com.tw/news/society/breakingnews/5620678", "comment": "Liberty Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 2 articles in 2 outlets (Liberty Times, NHK), Oct 26 to Oct 27, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "6d097008-fb4e-529b-a797-43c5ddb5a93f", "info": "Park24 to pay ¥3,000 to Times Car users hit by data breach", "date": "2026-10-24", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/park24-to-pay-3000-to-times-car-users-hit-by-data-breach-20261024/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/business/2026/10/24/park24-3000-yen-compensation/", "comment": "The Japan Times", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261026de65793", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/business/2026/10/28/companies/data-breach-business-risk/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 3 articles in 2 outlets (NHK, The Japan Times), Oct 24 to Oct 28, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 5,500,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "a83641bb-0fea-5053-9da1-b6b7aa67b54e", "info": "Digital Agency reports data breach via website vendor", "date": "2026-10-23", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Government\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/digital-agency-reports-data-breach-via-website-vendor-20261023/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/23/japan/digital-agency-breach/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 23, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "08d1c4da-72af-5a5d-89cf-735b98a8a832", "info": "[3rd Report] To our business partners and retirees, a request for caution regarding unauthorized access and potential information leakage from our group management server", "date": "2026-10-23", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/3-20261023/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/press/2026/10/23/notice-ransomware-incident-3rd-report-jp/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 23, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "7d9063f7-2a37-57af-8441-a3a75f96bb72", "info": "Japanese cybersecurity breach spreads: Capcom reports nearly 12 million accounts leaked globally", "date": "2026-10-22", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/japanese-cybersecurity-breach-spreads-capcom-reports-nearly-12-million-20261022/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.ltn.com.tw/news/world/breakingnews/5615353", "comment": "Liberty Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Liberty Times), Oct 22, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 12,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "4cfa43b2-b171-566c-a38b-542274c72b44", "info": "Driver's license images and other data leaked and sold on the dark web? From an Okinawa company", "date": "2026-10-22", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/drivers-license-images-and-other-data-leaked-and-sold-on-the-dark-web-20261022/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261022de63353", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 22, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "78ef27eb-60bc-5670-94c2-70937008dde2", "info": "Unauthorized access: 'Possibility that the stage has shifted to targeting financial institutions'", "date": "2026-10-21", "threat_level_id": "1", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"espionage\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Financial Services\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261021/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261021de62921", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 21, 2026. Title machine-translated from Japanese. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "940a37e1-eca3-5d76-b023-76ee56251b35", "info": "Data breach potentially exposes information of 125,000 police officers and staff", "date": "2026-10-21", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Government\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/data-breach-potentially-exposes-information-of-125000-police-officers-20261021/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/21/japan/crime-legal/arcadia-police-data-leak/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 21, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "c9349066-9a54-5b91-bd46-a5c1b44b1934", "info": "AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise", "date": "2026-10-21", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"espionage\"" }, { "name": "misp-galaxy:threat-actor=\"Storm-0940\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/ai-driven-large-scale-nation-state-campaign-using-artex-enables-supply-20261021/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/", "comment": "Microsoft Threat Intelligence", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Microsoft Threat Intelligence), Oct 21, 2026. Type: espionage campaign. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "8ce7a0ed-77cf-5bf8-9733-3836a13d2848", "info": "More data breaches reported by prefectural police forces, companies", "date": "2026-10-21", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Government\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/more-data-breaches-reported-by-prefectural-police-forces-companies-20261021/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/national/update2-more-data-breaches-reported-by-japan-prefectural-police-forces-companies", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 21, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "7bb5056c-f227-5e7b-9e57-3781ff6c905b", "info": "Furusato Choice announces leakage of 4.45 million pieces of personal information", "date": "2026-10-20", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/445-20261020/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261020de62437", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 20, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 4,450,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "48031cdd-2fc3-5f0f-ad85-d33c13c24202", "info": "Risk of information leakage for over 23,000 cases in national energy-saving housing project", "date": "2026-10-20", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Energy\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/23000-20261020/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261020de62509", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 20, 2026. Title machine-translated from Japanese. Type: data breach; sectors: energy. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 20,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "cd009b42-089c-5728-a2b9-6548e1296aa0", "info": "Chinese AI tool used in cyberattacks on Japanese companies, investigation finds", "date": "2026-10-20", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/chinese-ai-tool-used-in-cyberattacks-on-japanese-companies-investigati-20261020/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/20/japan/china-ai-cyberattacks/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 20, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "d588ddcb-259b-5cef-9c11-36404b8041bf", "info": "JETRO, more Japanese firms report breaches to network systems", "date": "2026-10-19", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/jetro-more-japanese-firms-report-breaches-to-network-systems-20261019/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261019de61442", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/crime/update3-japan-trade-agency-japanese-firms-face-unauthorized-access", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 2 articles in 2 outlets (Japan Today, NHK), Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "5eeafb22-6944-5ec7-ab31-490975414bc5", "info": "Over 16% of Japanese companies experience data breaches", "date": "2026-10-19", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/over-16-of-japanese-companies-experience-data-breaches-20261019/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/business/2026/10/19/16pct-japan-firms-data-breaches/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "31fe7336-d159-58b8-a813-5c9eafeef8b4", "info": "Karaoke hack shows cybercrime is routine", "date": "2026-10-18", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/karaoke-hack-shows-cybercrime-is-routine-20261018/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/commentary/2026/10/18/japan/karaoke-hack-cybercrime/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 18, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "0f63923b-3a81-5567-a0b6-f9f37de1e592", "info": "Japan Football Association investigating unauthorized access to official app", "date": "2026-10-18", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Technology\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261018/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261019de61320", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 18, 2026. Title machine-translated from Japanese. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "da575374-c906-530a-a376-7ea878a04825", "info": "Cyberattacks continue to menace Japan as more firms disclose data breaches", "date": "2026-10-17", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/cyberattacks-continue-to-menace-japan-as-more-firms-disclose-data-brea-20261017/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/17/japan/crime-legal/more-data-breaches-japan/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 17, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "770aa1eb-30f0-53d5-934d-f22af8129c4e", "info": "Yamato Transport confirms 5.31 mil customer records leaked", "date": "2026-10-16", "threat_level_id": "1", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Transportation\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/yamato-transport-confirms-531-mil-customer-records-leaked-20261016/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261016de60395", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/business/update1-japan%27s-yamato-transport-confirms-5.31-mil.-customer-records-leaked", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 2 articles in 2 outlets (Japan Today, NHK), Oct 16, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 5,300,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "3df005c2-639b-5e51-ac5d-db71805fa2c6", "info": "Comic Seymour confirms unauthorized access; member information leaked", "date": "2026-10-16", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261016/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261016de60740", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 16, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "884eb3ed-fe9c-5f65-b3e3-188f34dbda62", "info": "[Update 2] Report on Unauthorized Access to Group Managed Server and Potential Data Leak", "date": "2026-10-16", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/2-20261016/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/press/2026/10/16/notice-ransomware-incident-second-report-jp/", "comment": "The Japan Times", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/press/2026/10/19/notice-ransomware-incident-second-report/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 2 articles in 1 outlet (The Japan Times), Oct 16 to Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "fa05e398-d0d7-580f-84ce-45eda05ae2fa", "info": "Unauthorized access to system for obstetrics and gynecology clinics, medical institutions forced to respond", "date": "2026-10-15", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Health\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261015/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261015de59731", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 15, 2026. Title machine-translated from Japanese. Type: intrusion; sectors: health. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "8b89e28d-97bf-5e6a-8c09-f5c85148525c", "info": "Sourcenext: Approximately 22.51 million customer records may have been leaked", "date": "2026-10-15", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/2251-20261015/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261015de60043", "comment": "NHK", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261016de60556", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 2 articles in 1 outlet (NHK), Oct 15 to Oct 16, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 22,510,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "3cd6b16a-63f4-50d5-a1e3-fb001ad18311", "info": "Unstoppable personal information leaks, possibility of police involvement revealed", "date": "2026-10-14", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Government\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261014/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261014de59388", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 14, 2026. Title machine-translated from Japanese. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "6ff0e4e1-410d-55bb-a367-328e3be95c5e", "info": "Customer data breach suspected at sushi delivery operator", "date": "2026-10-14", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/customer-data-breach-suspected-at-sushi-delivery-operator-20261014/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/14/japan/crime-legal/sushi-data-breach/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 14, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "b30a84ed-a9c2-51aa-abbf-9beebf91015a", "info": "What happens to your information after a data breach", "date": "2026-10-14", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/what-happens-to-your-information-after-a-data-breach-20261014/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/14/japan/crime-legal/cyberattacks-japan-response/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 14, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "57ecc8ba-e740-5351-8bb5-6f7e89561778", "info": "Local government disaster prevention email distribution; addresses and other info leaked due to unauthorized access", "date": "2026-10-13", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Government\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261013/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261013de58789", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 13, 2026. Title machine-translated from Japanese. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "609a5cab-b3b8-56d8-a7ad-04606f4c3f2a", "info": "Japan's information service firm serving municipalities reports data leak", "date": "2026-10-13", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Government\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/japans-information-service-firm-serving-municipalities-reports-data-le-20261013/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/national/japan%27s-information-service-firm-serving-municipalities-reports-data-leak", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 13, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "d69b6729-1e94-5bbb-8b58-bc5fb98fe98d", "info": "Series of unauthorized access incidents analyzed as 'possibility of AI agent abuse'", "date": "2026-10-13", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/ai-20261013/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261013de58380", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 13, 2026. Title machine-translated from Japanese. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "81ee0f93-0a7c-52cb-a992-d71c77785c36", "info": "Driver’s license data breaches becoming major concern", "date": "2026-10-11", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/drivers-license-data-breaches-becoming-major-concern-20261011/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/10/11/japan/crime-legal/japan-drivers-license-data-breach-spread/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 11, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "caa5c820-c692-514c-8a46-d6c2888353d5", "info": "More Japanese firms hit by large-scale data breaches", "date": "2026-10-10", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/more-japanese-firms-hit-by-large-scale-data-breaches-20261010/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/business/2026/10/10/tech/japanese-firms-data-breaches/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 10, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "e6e48c01-c30c-5e58-8632-9695cff1c225", "info": "「スカイチケット」に不正アクセス 1400万件超 個人情報流出か", "date": "2026-10-09", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/1400-20261009/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261009de57103", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 14,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "3626c8fa-584c-5bba-84c1-14dfb085e8e9", "info": "JR東日本 えきねっとなどで最大200万件の情報漏えいの可能性", "date": "2026-10-09", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/jr-200-20261009/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261009de57177", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 2,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "47b62d3c-b4e3-5aff-803d-d34c7bc69eba", "info": "宿泊予約管理システム「手間いらず」最大445万人情報漏えいか", "date": "2026-10-09", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/445-20261009/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261010de57536", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 4,450,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "279e8f3c-1543-55f8-8830-3a4517b40954", "info": "Data leaks at travel companies could impact millions of customer records", "date": "2026-10-09", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/data-leaks-at-travel-companies-could-impact-millions-of-customer-recor-20261009/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/business/2026/10/09/tech/travel-companies-data-breach/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "23ee6f9d-d827-59ba-a13a-7d2df370055b", "info": "Bookoff, JR East each report 6 mil customer records leak in newest breach", "date": "2026-10-09", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/bookoff-jr-east-each-report-6-mil-customer-records-leak-in-newest-brea-20261009/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/crime/update1-bookoff-jr-east-each-report-6-mil.-customer-records-leak-in-newest-breach", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "6fd5ef5a-59dd-51a5-aeda-8180c8946429", "info": "カラオケ店運営の第一興商 約872万件の個人情報漏えいのおそれ", "date": "2026-10-08", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/872-20261008/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261008de56831", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 8, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 8,720,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "ce55355e-48f3-531c-b759-5bdb2d6a0c01", "info": "53 companies in Japan hit by Qilin ransomware group", "date": "2026-10-08", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"ransomware\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/53-companies-in-japan-hit-by-qilin-ransomware-group-20261008/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/crime/update3-53-companies-in-japan-hit-by-qilin-ransomware-group-police-agency", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 8, 2026. Type: ransomware. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "c06f86e7-c64e-512c-8a8f-73add9d090b1", "info": "ブックオフグループ 最大で643万件の会員情報漏えいの可能性", "date": "2026-10-08", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/643-20261008/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261009de56955", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 8, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 6,430,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "c979302a-20ef-559d-902a-1ce544bd066d", "info": "Cyberattacks against Japanese firms continue, putting millions at risk of identity theft", "date": "2026-10-07", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/cyberattacks-against-japanese-firms-continue-putting-millions-at-risk-20261007/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/business/2026/10/07/tech/more-companies-data-leak/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 7, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "e78a95af-04e5-53a1-9a36-d5e48b7ce5a3", "info": "損保ジャパン のべ6万件の顧客情報が流出か 不正アクセス", "date": "2026-10-07", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/6-20261007/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261007de55973", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 7, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 60,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "7f214974-e737-585d-908a-e4d3d128ade8", "info": "ソフトバンク子会社に不正アクセス クラウドサービスに障害", "date": "2026-10-07", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261007/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261007de56048", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 7, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "80ce7b83-eaad-5122-a476-86c735734af7", "info": "ミスターマックスで不正アクセス 個人情報最大170万人超流出か", "date": "2026-10-06", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/170-20261006/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261006de55099", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 6, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 1,700,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "cb26a1f1-78b3-5e40-967a-728e6f29231c", "info": "South Korea’s Lee says AI appears to have been used in bank hacks", "date": "2026-10-06", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Financial Services\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/south-koreas-lee-says-ai-appears-to-have-been-used-in-bank-hacks-20261006-2/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/business/2026/10/06/south-korea-bank-hacks/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 6, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "3974aed3-cf56-573d-a423-73ef6335b54b", "info": "More Japan firms report customer data leaks as unauthorized access widens", "date": "2026-10-06", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/more-japan-firms-report-customer-data-leaks-as-unauthorized-access-wid-20261006/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/crime/GMO-internet-service-unit-retailer-Mr-Max-both-report-massive-customer-data-leaks", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 6, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "74d032d6-7ec6-5f38-8305-3224e545a9de", "info": "タイムズカー情報漏えい 業界団体に対策の点検を要請 国交省", "date": "2026-10-06", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261006/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261006de55582", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 6, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "ef744a4b-8adf-5e7e-8e88-b22951f462ad", "info": "大和証券 委託先サーバー不正アクセス 個人情報11万人分流出か", "date": "2026-10-05", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/11-20261005/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261005de54568", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 5, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 110,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "2aeca8fb-bf43-5727-85e0-ac3a8fa28ba0", "info": "大起水産 不正アクセスで約17万5000人分の個人情報漏えいか", "date": "2026-10-05", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/175000-20261005/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261005de54848", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 5, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 170,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "2017bb33-41ac-5fea-a089-82f50987462d", "info": "Yakiniku King BBQ chain says over 10 mil customer records leaked", "date": "2026-10-05", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/yakiniku-king-bbq-chain-says-over-10-mil-customer-records-leaked-20261005/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/business/update2-japan%27s-yakiniku-king-bbq-chain-says-over-10-mil.-customer-records-leaked", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 5, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "708adee5-ceb5-5c54-b9e7-d1755b3c182a", "info": "日経新聞サイバー攻撃で情報漏えいか なりすましメールが送信", "date": "2026-10-04", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261004/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261004de54358", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 4, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "50a2b64e-ac29-5d5e-af40-dae6d80f7796", "info": "第一ライフに不正アクセス 12万人分の従業員情報が流出か", "date": "2026-10-03", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/12-20261003/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261003de54037", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 3, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 120,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "8de0d3fb-4329-5ba5-85db-492c681ed5b5", "info": "Thousands sign up for legal action website in car-share service data leak", "date": "2026-10-03", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/thousands-sign-up-for-legal-action-website-in-car-share-service-data-l-20261003/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://japantoday.com/category/national/update1-thousands-sign-up-for-legal-action-website-in-car-share-service-data-leak", "comment": "Japan Today", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 3, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "a5bca504-4398-5972-84d6-e5b87b9da762", "info": "当社グループ管理サーバーへの不正アクセスに関するお知らせ", "date": "2026-10-02", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261002/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/press/2026/10/02/noticeransomware-incident-jp/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 2, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "69cbaa89-c50c-536f-8b53-d4a314e575bc", "info": "佐川急便に不正アクセス 住所など個人情報が漏えいか", "date": "2026-10-01", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/incident-20261001/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20261002de53762", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Oct 1, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "feb5bc10-84f6-56cb-9835-6711413c9806", "info": "Times Car Rental says data breach affected 6.6 million accounts", "date": "2026-09-30", "threat_level_id": "2", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/times-car-rental-says-data-breach-affected-66-million-accounts-20260930/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.japantimes.co.jp/news/2026/09/30/japan/crime-legal/times-car-rental-hack/", "comment": "The Japan Times", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (The Japan Times), Sep 30, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 6,600,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "5b11bf30-683c-548f-b4bd-0d46363123cc", "info": "セイコーマート 不正アクセスで約57万アカウント漏えいか", "date": "2026-09-29", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"data_breach\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/57-20260929/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20260929de53020", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Sep 29, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 570,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "ec034b29-0c62-505e-afce-8e73db89287b", "info": "東京メトロ 不正アクセスでメールアドレス 約5万9000件流出か", "date": "2026-09-27", "threat_level_id": "3", "analysis": "0", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"detected-unreviewed\"" }, { "name": "securitystudies:type=\"intrusion\"" }, { "name": "misp-galaxy:country=\"japan\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/59000-20260927/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://news.web.nhk/newsweb/na/nd-20260927de52694", "comment": "NHK", "to_ids": false }, { "type": "text", "category": "Other", "value": "Detected automatically from 1 article in 1 outlet (NHK), Sep 27, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 50,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "df93c624-4dac-5413-a1f3-71ded88e6b63", "info": "GitLab maximum-severity path traversal exploited within hours of disclosure", "date": "2026-09-11", "threat_level_id": "1", "analysis": "2", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"curated\"" }, { "name": "securitystudies:type=\"supply_chain\"" }, { "name": "misp-galaxy:country=\"united states\"" }, { "name": "misp-galaxy:country=\"united kingdom\"" }, { "name": "misp-galaxy:country=\"germany\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:country=\"india\"" }, { "name": "misp-galaxy:country=\"singapore\"" }, { "name": "misp-galaxy:sector=\"Technology and Software Supply Chain\"" }, { "name": "misp-galaxy:sector=\"Financial Services\"" }, { "name": "misp-galaxy:sector=\"Government\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/gitlab-maximum-severity-path-traversal-exploited-within-hours-of-disclosure/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://thehackernews.com/2026/09/gitlab-cvss-10-file-read-flaw-draws-in.html", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-one-known-exploited-vulnerability-catalog", "comment": "source", "to_ids": false }, { "type": "text", "category": "Other", "value": "CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal in the GitLab repository commits API, came under in-the-wild probing from 06:00 UTC on 11 September 2026 according to watchTowr, the same day CISA added it to the KEV catalog. Exploitation requires only that a single public project exists and allows arbitrary file reads of logs, configuration files, credentials and secrets. Successful exploitation creates a direct path to source code theft and CI/CD pipeline compromise. Patches are available in 19.3.2, 19.2.6 and 19.1.8, with a 14 September federal remediation deadline.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "6d6d10d1-508f-5d26-829f-159c5a2f5a31", "info": "Dutch NCSC warns critical Check Point VPN flaws face imminent exploitation", "date": "2026-09-09", "threat_level_id": "1", "analysis": "2", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"curated\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"netherlands\"" }, { "name": "misp-galaxy:country=\"germany\"" }, { "name": "misp-galaxy:country=\"united kingdom\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:country=\"singapore\"" }, { "name": "misp-galaxy:country=\"australia\"" }, { "name": "misp-galaxy:sector=\"Government\"" }, { "name": "misp-galaxy:sector=\"Financial Services\"" }, { "name": "misp-galaxy:sector=\"Critical Infrastructure\"" }, { "name": "misp-galaxy:sector=\"Manufacturing\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/dutch-ncsc-warns-critical-check-point-vpn-flaws-face-imminent-exploitation/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html", "comment": "source", "to_ids": false }, { "type": "text", "category": "Other", "value": "The Dutch National Cyber Security Centre issued a warning that exploitation of CVE-2026-85102 and CVE-2026-85103 in Check Point VPN Security Gateway and Security Management Servers is imminent, assessing both likelihood and impact as high. CVE-2026-85102 is an improper certificate validation flaw during VPN negotiation enabling arbitrary code execution, while CVE-2026-85103 is a heap overflow in the VPN certificate ASN.1 decoder permitting remote code execution; both are rated 9.8. Affected versions include R81.20, R82, R82.10, R81.10.x and R82.00.x plus end-of-support R80 through R81.10, with R82.20 unaffected. No public exploit code existed at time of reporting and neither CVE appears in the CISA KEV catalog as of version 2026.09.11. Patches shipped 9 September 2026.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "b85881eb-f31c-5ccc-a02d-32f30974e627", "info": "Unpatched StyleSmuggler Zero-Day Exploited Across Magento and Adobe Commerce Stores", "date": "2026-09-04", "threat_level_id": "1", "analysis": "2", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"curated\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"netherlands\"" }, { "name": "misp-galaxy:country=\"united states\"" }, { "name": "misp-galaxy:country=\"germany\"" }, { "name": "misp-galaxy:country=\"australia\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Retail & E-commerce\"" }, { "name": "misp-galaxy:sector=\"Technology\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/unpatched-stylesmuggler-zero-day-exploited-across-magento-and-adobe-commerce-stores/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://thehackernews.com/2026/09/unpatched-magento-and-adobe-commerce.html", "comment": "source", "to_ids": false }, { "type": "text", "category": "Other", "value": "Dutch security firm Sansec disclosed active exploitation, beginning 4 September 2026, of an unpatched flaw affecting Magento Open Source 2.4.6 through 2.4.9 and Adobe Commerce. Attackers plant PHP code into files Magento writes, such as failure reports, and execution is triggered automatically when the platform renders its routine Payment Transaction Failed Reminder email, requiring no user interaction. The resulting backdoor runs as a process disguised as the Linux kernel thread [kworker/u:8:0], installs binaries in the user home directory rather than the web root, and re-adds cron entries every five minutes. No CVE, patch or official workaround existed as of 6 September 2026, with the next scheduled Adobe security release set for 8 September.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "a33a801c-155e-55ff-a042-ba68fbef2d44", "info": "Google Patches Sixth Actively Exploited Chrome Zero-Day of 2026", "date": "2026-09-04", "threat_level_id": "1", "analysis": "2", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"curated\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"united states\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:country=\"south korea\"" }, { "name": "misp-galaxy:country=\"australia\"" }, { "name": "misp-galaxy:country=\"india\"" }, { "name": "misp-galaxy:sector=\"Government\"" }, { "name": "misp-galaxy:sector=\"Technology\"" }, { "name": "misp-galaxy:sector=\"Financial Services\"" }, { "name": "misp-galaxy:sector=\"Healthcare\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/google-patches-sixth-actively-exploited-chrome-zero-day-of-2026/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.cisa.gov/news-events/alerts/2026/09/04/cisa-adds-one-known-exploited-vulnerability-catalog", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://thehackernews.com/2026/09/google-releases-chrome-update-to-patch.html", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.bleepingcomputer.com/news/security/google-warns-of-new-chrome-zero-day-flaw-exploited-in-attacks/", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://securityaffairs.com/198405/security/google-fixes-the-sixth-actively-exploited-chrome-zero-day-of-2026.html", "comment": "source", "to_ids": false }, { "type": "text", "category": "Other", "value": "Google released an emergency Chrome update addressing CVE-2026-85046, a CVSS 8.8 type confusion vulnerability in the V8 JavaScript and WebAssembly engine that enables arbitrary code execution within the renderer sandbox via a crafted HTML page. The flaw was under active exploitation prior to patching and is the sixth exploited Chrome zero-day of 2026. CISA added it to the Known Exploited Vulnerabilities catalogue on 4 September 2026, requiring Federal Civilian Executive Branch agencies to remediate by 18 September 2026. The fix ships in Chrome 152.0.7977.82.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "77b198ef-5ab0-5a24-b4fb-c6ca80d2ebc7", "info": "SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution", "date": "2026-09-02", "threat_level_id": "1", "analysis": "2", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"curated\"" }, { "name": "securitystudies:type=\"other\"" }, { "name": "misp-galaxy:country=\"united states\"" }, { "name": "misp-galaxy:country=\"australia\"" }, { "name": "misp-galaxy:country=\"germany\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:country=\"singapore\"" }, { "name": "misp-galaxy:sector=\"Government\"" }, { "name": "misp-galaxy:sector=\"Technology\"" }, { "name": "misp-galaxy:sector=\"Financial Services\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/sonicwall-sma-1000-zero-day-chain-exploited-for-remote-code-execution/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-actively-exploited-sma1000-zero-day-flaws/", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html", "comment": "source", "to_ids": false }, { "type": "text", "category": "Other", "value": "SonicWall disclosed that threat actors are chaining two previously unknown vulnerabilities in SMA 1000 remote-access appliances. CVE-2026-83548, a CVSS 10.0 pre-authentication server-side request forgery in the WorkPlace interface, is used to reach internal functionality, and CVE-2026-83549, a CVSS 7.8 OS command injection in the Appliance Management Console, converts that access into arbitrary command execution. CISA added both to the Known Exploited Vulnerabilities catalogue on 2 September 2026 with a remediation deadline of 5 September. Compromise of these appliances yields authenticated network position behind perimeter controls.", "comment": "summary", "to_ids": false } ] } }, { "Event": { "uuid": "82d67df5-545f-59b5-bdad-47706b5845aa", "info": "JFrog Artifactory flaws chained to administrator access and Rust backdoor deployment", "date": "2026-09-01", "threat_level_id": "1", "analysis": "2", "distribution": "3", "published": false, "Orgc": { "name": "SecurityStudies.info" }, "Tag": [ { "name": "tlp:clear" }, { "name": "securitystudies:status=\"curated\"" }, { "name": "securitystudies:type=\"supply_chain\"" }, { "name": "misp-galaxy:country=\"united states\"" }, { "name": "misp-galaxy:country=\"germany\"" }, { "name": "misp-galaxy:country=\"israel\"" }, { "name": "misp-galaxy:country=\"india\"" }, { "name": "misp-galaxy:country=\"japan\"" }, { "name": "misp-galaxy:sector=\"Technology and Software Supply Chain\"" }, { "name": "misp-galaxy:sector=\"Financial Services\"" }, { "name": "misp-galaxy:sector=\"Telecommunications\"" } ], "Attribute": [ { "type": "link", "category": "External analysis", "value": "https://securitystudies.info/cyber/incidents/jfrog-artifactory-flaws-chained-to-administrator-access-and-rust-backdoor-deployment/", "comment": "SecurityStudies.info entry", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://thehackernews.com/2026/09/attackers-chain-jfrog-artifactory-flaws.html", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.bleepingcomputer.com/news/security/artifactory-flaws-chained-in-attacks-deploying-backdoor-malware/", "comment": "source", "to_ids": false }, { "type": "link", "category": "External analysis", "value": "https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog", "comment": "source", "to_ids": false }, { "type": "text", "category": "Other", "value": "Wiz disclosed coordinated exploitation of CVE-2026-42018, which returns an internal anonymous-user token to an unauthenticated caller, chained with CVE-2026-42016 to escalate that token to administrator scope, taking attackers from first request to new admin account in under five minutes. Separately CVE-2026-82329, a CVSS 9.8 authentication bypass, was exploited between 1 and 8 September with approximately 406,000 attempts detected on 2 September alone. Post-compromise activity included persistent admin account creation, malicious Groovy plugin installation, custom Rust backdoor deployment and extraction of cluster join keys for lateral movement. Cloud instances were unaffected; CISA KEV-listed CVE-2026-42016 and CVE-2026-42018 on 11 September and CVE-2026-82329 on 2 September.", "comment": "summary", "to_ids": false } ] } } ] }