Fivot（IDARE）Data breach / unauthorized access incident
- Occurred on
- Unconfirmed
- Announced on
- October 13, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- 129,659 people
- Main impact
- The company announced that unauthorized access to IDARE resulted in the leakage of information of 129,659 people, including former members. Account balances and transaction histories were also affected, but passwords and full card numbers are reported not to have been leaked.
- Information involved
- Email addressUser / member IDCard & payment dataIdentity verification dataPhone numberHome addressFull nameDate of birth
- Cause / key point
- The company says the cause was unauthorized access exploiting a vulnerability in third-party software used for customer support and similar functions. At the time of the announcement it listed strengthening vulnerability and access-log monitoring, accepting external expert investigation, and improving information management as future measures.About Exploitation of vulnerabilities
- Industry
- Finance & insurance
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- SSHelpfeel（Gyazo）2026.09.16 announced・Affected 23,620,000 records
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
- SSSKDDI(ISP事業者向けメール基盤)2026.06.23 announced・Affected 12,231,954 people
- Sムラウチドットコム2026.09.15 announced・Affected 7,710,000 records
- Sホワイトエッセンス（予約・基幹システム）2026.10.05 announced・Affected 1,050,000 accounts
Same industry
- Sアフラック生命保険2026.06.30 announced・Affected 4,400,000 people
- SCSアカウンティング株式会社2026.05.15 announced・Affected Unknown
- Sマネーフォワード（GitHub）2026.05.01 announced・Affected 370 records
- Aビューカード（VIEW’s NET）2026.10.09 announced・Affected 4,030,000 records
- A損保ジャパン（SMILING ROAD）2026.10.07 announced・Affected 60,000 records
- A大和証券2026.10.05 announced・Affected 220,000 records
Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)
Read the Exploitation of vulnerabilities guide and national trends →