カインドオル（ECサイト）Data breach / unauthorized access incident
- Occurred on
- August 23, 2026
- Announced on
- September 2, 2026
- Severity
- SCompromise of deep personal data or usable credentials.
- Scale
- 136,464 people
- Main impact
- Data of 136,464 customers confirmed leaked, of which 109,311 include address information. Customer passwords and card information are not affected.
- Information involved
- Email addressUser / member IDPasswordPhone numberHome addressFull nameDate of birth
- Cause / key point
- Unauthorized access using staff credentials obtained via phishing.About Targeted email & phishing
- Industry
- Retail & e-commerce
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "スタッフ"
Incidents where the damage spread through the same service or system.
Incidents related to "パスワード・カード"
Incidents where the damage spread through the same service or system.
Same attack method
- SAxcelead Drug Discovery Partners株式会社2026.07.22 announced・Affected 7,000 records
- B株式会社講談社2026.08.03 announced・Affected 3,812 records
- B株式会社マリモホールディングス2026.03.06 announced・Affected 1,360 people
- B株式会社じほう2026.02.26 announced・Affected 890 records
- B株式会社八十二長野銀行2026.10.19 announced・Affected 672 records
- S東京都立大学（教員のGoogleアカウント）2026.01.08 announced・Affected 423 records
Same industry
- S阪急阪神百貨店（H2O ID等）2026.10.19 announced・Affected 1,260,000 records
- Sパピレス（Renta!）2026.10.19 announced・Affected Unknown
- Sジグザグ（WorldShopping）2026.10.19 announced・Affected 301 people
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
- Sアクティブ（通販サイト）2026.10.06 announced・Affected 54,916 records
- SMrMax2026.10.06 announced・Affected 1,735,154 people
Attack method classification: Targeted email & phishing(Fake emails and sites that steal credentials)
Read the Targeted email & phishing guide and national trends →