Skip to content
JAENES
SPossible leakApril 27, 2026 announced

株式会社ボンフォームData breach / unauthorized access incident

笹尾 祐太朗の写真Reviewed by Yutaro SasaoWritten by Leak Watch editorial team published ・ updated
Occurred on
Unconfirmed
Announced on
April 27, 2026
Severity
SCompromise of deep personal data or usable credentials.
Scale
3,268 people
Main impact
Due to unauthorized access to the online store, card information may have been leaked; the card data affected is 3,463 records · 3,268 individuals, and 735 people were disclosed to also have had their email, password, and phone included.
Information involved
Email addressPasswordCard & payment dataPhone numberFull name
Cause / key point
Unauthorized access exploiting a system vulnerability; the JavaScript on the payment page was tampered with.About Exploitation of vulnerabilities
Industry
Retail & e-commerce
Listing / capital
Unlisted
Sources
Last updated
October 20, 2026
Email addressPasswordCard & payment dataPhone numberFull nameHow severity is assessed →

Is this incident worth paying attention to?

Written & reviewed

笹尾 祐太朗の写真

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.

CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.

Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:

Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction

Related incidents

Browse the database →

Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).

Same attack method

Same industry

Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)

Read the Exploitation of vulnerabilities guide and national trends →

← Back to Breach Watch