LEAN BODYData breach / unauthorized access incident
- Occurred on
- August 31, 2026
- Announced on
- September 15, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- 440,000 accounts
- Main impact
- Data from 約44万アカウント, including email addresses and encrypted passwords, were leaked; the company announced that height, weight, exercise purpose, purchase information, and the last four digits of cards were also affected.
- Information involved
- Email addressUser / member IDPasswordCard & payment dataFull nameDate of birthHealth & medical data
- Cause / key point
- Unauthorized access to the analytics tool Metabase that had a vulnerability.About Exploitation of vulnerabilities
- Industry
- Services & other
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "メール"
Incidents where the damage spread through the same service or system.
- B東郷町（地域安心メール・高齢者捜索メール）2026.10.13 announced・Affected Unknown
- Aカルビー（絶品部「やめられない、とまらない」課）2026.10.09 announced・Affected Unknown
- Aファイバーゲート（クラウド利用サービス）2026.10.09 announced・Affected Unknown
- A日本能率協会マネジメントセンター（時間〈とき〉ラボ）2026.10.09 announced・Affected 2,950 people
- ALIXIL（すまいひろば・猫壁ひろば）2026.10.09 announced・Affected Unknown
- B森永乳業（マウントカフェ部）2026.10.09 announced・Affected 291 people
Same attack method
- SSHelpfeel（Gyazo）2026.09.16 announced・Affected 23,620,000 records
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
- SSSKDDI(ISP事業者向けメール基盤)2026.06.23 announced・Affected 12,231,954 people
- Sムラウチドットコム2026.09.15 announced・Affected 7,710,000 records
- Sホワイトエッセンス（予約・基幹システム）2026.10.05 announced・Affected 1,050,000 accounts
Same industry
- SSリクルート（カーセンサーnet、C-MATCH）2026.10.21 announced・Affected 3,709,551 records
- S日本郵政（ゆうID・ゆうゆうポイント）2026.10.19 announced・Affected 249 accounts
- S第一興商（ビッグエコー等）2026.10.08 announced・Affected 8,631,000 records
- Sセレス（ポイントインカム）2026.10.07 announced・Affected 195 records
- Sエバーグリーン・マーケティング（メール）2026.10.06 announced・Affected 763 records
- Sチケットプラス（チケプラ）2026.10.01 announced・Affected 107 people
Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)
Read the Exploitation of vulnerabilities guide and national trends →