JR九州フードサービス（トイポアプリ）Data breach / unauthorized access incident
- Occurred on
- Unconfirmed
- Announced on
- October 13, 2026
- Severity
- BIncidents centered on names and contact details.
- Scale
- 26,900 people
- Main impact
- The company announced that unauthorized access to トイポアプリ may have exposed customer information for about 26,900 people (user IDs, phone numbers, etc.).
- Information involved
- Email addressUser / member IDPhone numberHome addressFull nameDate of birth
- Cause / key point
- They say some APIs allowed unauthorized third parties to obtain other users' information; the underlying vulnerability has been fixed and the same method can no longer be used to retrieve information.About Exploitation of vulnerabilities
- Industry
- Transport & travel
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- SSHelpfeel（Gyazo）2026.09.16 announced・Affected 23,620,000 records
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
- SSSKDDI(ISP事業者向けメール基盤)2026.06.23 announced・Affected 12,231,954 people
- Sムラウチドットコム2026.09.15 announced・Affected 7,710,000 records
- Sホワイトエッセンス（予約・基幹システム）2026.10.05 announced・Affected 1,050,000 accounts
Same industry
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- S日水物流(ニッスイグループ)2026.10.07 announced・Affected Unknown
- Sあいの風とやま鉄道株式会社2026.09.15 announced・Affected 1,409 people
- S西武鉄道（52席の至福）2026.09.02 announced・Affected 500 people
- Aエイチ・アイ・エス(HIS タイ現地法人)2026.10.07 announced・Affected 627 people
- A佐川急便（お荷物問い合わせ）2026.10.01 announced・Affected Unknown
Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)
Read the Exploitation of vulnerabilities guide and national trends →