ドトールコーヒー（社内システム・従業員と退職者の情報）Data breach / unauthorized access incident
- Occurred on
- October 20, 2026
- Announced on
- October 26, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- 951 people
- Main impact
- The company disclosed that unauthorized external access to internal systems may have exposed the names, dates of birth, addresses, email addresses, phone numbers, and bank account numbers of 951 current and former employees (from four Tokyo stores: 西武大泉学園駅店, 国立大学通り店, 東京駅八重洲中央口店, 石神井公園駅前店). PINs and online banking IDs/passwords were not included, no access to customer information or secondary damage has been confirmed, current employees will be contacted individually and former employees will be notified via this public disclosure.
- Information involved
- Full nameDate of birthHome addressEmail addressPhone number
- Cause / key point
- Unauthorized access to internal systems by an external third party (detected 2026-10-20; intrusion route and attack method not disclosed).
- Industry
- Food & dining
- Listing / capital
- UnlistedParent company (listed holding company): ドトール・日レスホールディングス(TSE Prime 9825)
The incident entity 株式会社ドトールコーヒー is under the listed holding company ドトール・日レスホールディングス (TSE Prime・9825).
- Last updated
- October 29, 2026
Stock price reaction to the disclosureドトール・日レスホールディングス・親会社(上場持株会社) / 東証プライム 9825
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- A佐川急便（お荷物問い合わせ）2026.10.01 announced・Affected 53,230,000 records
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- SSライドオンエクスプレス（『銀のさら・釜寅・すし上等』公式サイト・公式アプリ）2026.10.13 announced・Affected 6,500,000 records
- SSニチレイグループ2026.09.18 announced・Affected Unknown
- Sアサヒグループホールディングス2026.07.17 announced・Affected 1,525,000 records
- S佐嘉平川屋2026.06.15 announced・Affected Unknown
- Aカルビー（絶品部「やめられない、とまらない」課）2026.10.09 announced・Affected Unknown
- A湖池屋（湖池屋GOGO!ランド）2026.10.09 announced・Affected 1,800 accounts
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →