チャーム本店Data breach / unauthorized access incident
- Occurred on
- July 1, 2026
- Announced on
- September 1, 2026
- Severity
- SCompromise of deep personal data or usable credentials.
- Scale
- 370,000 records
- Main impact
- Approximately 370,000 records confirmed leaked and approximately 20,000 at risk; unauthorized logins to 239 accounts were confirmed. Customer information and password hash values, etc. were affected.
- Information involved
- Email addressPasswordHome addressFull name
- Cause / key point
- Cause under investigation.About Abuse of credentials
- Industry
- Retail & e-commerce
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "ハッシュ"
Incidents where the damage spread through the same service or system.
- Sクリプトン（SONICWIRE・D2R）2026.10.19 announced・Affected 420,000 records
- Bリンクステーション（GETTIIS会員情報）2026.10.19 announced・Affected Unknown
- Aファンケル・アテニア（EC会員情報）2026.10.16 announced・Affected 834,947 records
- SNTTソルマーレ（コミックシーモア）2026.10.15 announced・Affected Unknown
- Aビューティガレージ（ECサイト(2026年10月)）2026.10.15 announced・Affected 775,725 accounts
- SSライドオンエクスプレス（『銀のさら・釜寅・すし上等』公式サイト・公式アプリ）2026.10.13 announced・Affected 6,500,000 records
Same attack method
- A日本経済新聞社(日経)2026.10.16 announced・Affected 1,830,000 records
- ACAMPFIRE2026.06.02 announced・Affected 225,846 accounts
- Aウエーブ（Webアップロード）2026.04.01 announced・Affected 176,810 records
- Aシチズン時計（問い合わせ管理）2026.10.06 announced・Affected 100,000 people
- Bイノベーション（GitHub）2026.08.07 announced・Affected 62,689 people
- A損保ジャパン（SMILING ROAD）2026.10.07 announced・Affected 60,000 records
Same industry
- S阪急阪神百貨店（H2O ID等）2026.10.19 announced・Affected 1,260,000 records
- Sパピレス（Renta!）2026.10.19 announced・Affected Unknown
- Sジグザグ（WorldShopping）2026.10.19 announced・Affected 301 people
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
- Sアクティブ（通販サイト）2026.10.06 announced・Affected 54,916 records
- SMrMax2026.10.06 announced・Affected 1,735,154 people
Attack method classification: Abuse of credentials(Logging in legitimately with leaked or guessed passwords)
Read the Abuse of credentials guide and national trends →