ENEOSパワー(ENEOSでんき・でんきサービスのお客さまページ)Data breach / unauthorized access incident
- Occurred on
- October 19, 2026
- Announced on
- October 28, 2026
- Severity
- SCompromise of deep personal data or usable credentials.
- Scale
- 57 people
- Main impact
- Unauthorized access to the customer pages of ENEOSでんき and でんきサービス resulted in the confirmation and disclosure that personal data for 57 people — names, addresses, login IDs, passwords, usage statements (usage amounts and billing amounts), customer numbers, etc. — were leaked externally. Bank account numbers and credit card numbers were not affected; individual notifications to affected persons and an investigation are underway.
- Information involved
- Full nameHome addressUser / member IDPassword
- Cause / key point
- Unauthorized access by a third party to customer pages (occurred 2026-10-19 19:04–10-20 05:11, discovered on 10-27); the intrusion route is under investigation.
- Industry
- Services & other
- Listing / capital
- UnlistedParent company (listed holding company): ENEOSホールディングス(TSE Prime 5020)
The incident entity, ENEOSパワー株式会社, is an electricity retail company under ENEOSホールディングス (TSE Prime・5020).
- Sources
- Last updated
- October 29, 2026
Stock price reaction to the disclosureENEOSホールディングス・親会社(上場持株会社) / 東証プライム 5020
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Other incidents at ENEOSパワー
Incidents related to "クレジットカード"
Incidents where the damage spread through the same service or system.
- Aアドベンチャー(スカイチケット)2026.10.29 announced・Affected 32,341 records
- S日本航空・日本トランスオーシャン航空(JTA、委託先: アマデウス)2026.10.28 announced・Affected 92,000 records
- Bベネフィット・ワン(会員優待サービス「トクかい」、共同提供: クレディセゾン、業務委託先: フォレステック)2026.10.28 announced・Affected 29,465 people
- SS楽天トラベル2026.10.26 announced・Affected 2,600,000 people
- SS株式会社フューチャーショップ(futureshop)2026.10.23 announced・Affected 3,147,469 records
- A株式会社グッドスマイルカンパニー2026.10.23 announced・Affected Unknown
Same attack method
- A佐川急便(お荷物問い合わせ)2026.10.01 announced・Affected 53,230,000 records
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- SSリクルート(カーセンサーnet、C-MATCH)2026.10.21 announced・Affected 3,709,551 records
- S日本郵政(ゆうID・ゆうゆうポイント)2026.10.19 announced・Affected 249 accounts
- Sスクウェア・エニックス2026.10.19 announced・Affected Unknown
- S第一興商(ビッグエコー等)2026.10.08 announced・Affected 8,631,000 records
- Sセレス(ポイントインカム)2026.10.07 announced・Affected 195 records
- Sエバーグリーン・マーケティング(メール)2026.10.06 announced・Affected 763 records
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →