アエナ（ECアプリ）Data breach / unauthorized access incident
- Occurred on
- Unconfirmed
- Announced on
- October 14, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- 817,215 people
- Main impact
- The company announced that unauthorized viewing occurred on the EC app’s member My Page, and up to 817,215 people’s names, addresses, and card last-4 digits may have been viewed. Full card numbers etc. are excluded.
- Information involved
- Email addressCard & payment dataPhone numberHome addressFull nameDate of birth
- Cause / key point
- The company attributes the cause to mechanical repeated access via unauthorized access and says details are under investigation.
- Industry
- Retail & e-commerce
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bユミルリンク（メール配信システム）2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- S阪急阪神百貨店（H2O ID等）2026.10.19 announced・Affected 1,260,000 records
- Sパピレス（Renta!）2026.10.19 announced・Affected Unknown
- Sジグザグ（WorldShopping）2026.10.19 announced・Affected 301 people
- Sアクティブ（通販サイト）2026.10.06 announced・Affected 54,916 records
- SMrMax2026.10.06 announced・Affected 1,735,154 people
- S講談社BECK（旧ビーシーのメール）2026.10.02 announced・Affected 1 records
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →