アズマ（hitmart）Data breach / unauthorized access incident
- Occurred on
- April 7, 2026
- Announced on
- October 8, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- Unknown
- Main impact
- It was announced that a malicious program was introduced from another site on the same server as hitmart, potentially exposing member information and order history; encrypted passwords and card information are said not to be included.
- Information involved
- Email addressPasswordPhone numberHome addressFull nameDate of birth
- Cause / key point
- The company explained that it had left a retired site on the same server instead of removing it, and an automatic update on that site introduced a backdoor that allowed access to other data.
- Industry
- Retail & e-commerce
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "プログラム"
Incidents where the damage spread through the same service or system.
- Bリンクステーション（GETTIIS会員情報）2026.10.19 announced・Affected Unknown
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- A損保ジャパン（SMILING ROAD）2026.10.07 announced・Affected 60,000 records
- Aシチズン時計（問い合わせ管理）2026.10.06 announced・Affected 100,000 people
- Sホワイトエッセンス（予約・基幹システム）2026.10.05 announced・Affected 1,050,000 accounts
- Aアバハウスインターナショナル2026.10.03 announced・Affected Unknown
Same industry
- S阪急阪神百貨店（H2O ID等）2026.10.19 announced・Affected 1,260,000 records
- Sパピレス（Renta!）2026.10.19 announced・Affected Unknown
- Sジグザグ（WorldShopping）2026.10.19 announced・Affected 301 people
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
- Sアクティブ（通販サイト）2026.10.06 announced・Affected 54,916 records
- SMrMax2026.10.06 announced・Affected 1,735,154 people
Attack method classification: Under investigation / not stated(Cause not disclosed)
Read the Under investigation / not stated guide and national trends →