株式会社イープラス(イープラス/スマチケ)Data breach / unauthorized access incident
- Occurred on
- September 11, 2026
- Announced on
- September 29, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- 1,463 records
- Main impact
- Information of 1,463 applicants for refunds of electronic tickets “スマチケ” was leaked; it includes names, email addresses, bank transfer account information, addresses, etc., posing risks of financial loss and identity fraud.
- Information involved
- Email addressCard & payment dataHome addressFull name
- Cause / key point
- Unauthorized third-party access to the system that manages refund information.
- Industry
- Retail & e-commerce
- Listing / capital
- UnlistedParent company: リクルートホールディングス(東証プライム 6098)
イープラス is a subsidiary of リクルートホールディングス.
- Sources
- Last updated
- October 20, 2026
Stock price reaction to the disclosureリクルートホールディングス・親会社 / 東証プライム 6098
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Other incidents at イープラス
Same attack method
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bユミルリンク(メール配信システム)2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- S阪急阪神百貨店(H2O ID等)2026.10.19 announced・Affected 1,260,000 records
- Sパピレス(Renta!)2026.10.19 announced・Affected Unknown
- Sジグザグ(WorldShopping)2026.10.19 announced・Affected 301 people
- Sアクティブ(通販サイト)2026.10.06 announced・Affected 54,916 records
- SMrMax2026.10.06 announced・Affected 1,735,154 people
- S講談社BECK(旧ビーシーのメール)2026.10.02 announced・Affected 1 records
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →