マネーフォワード（GitHub）Data breach / unauthorized access incident
- Occurred on
- Unconfirmed
- Announced on
- May 1, 2026
- Severity
- SCompromise of deep personal data or usable credentials.
- Scale
- 370 records
- Main impact
- A third party reportedly misused GitHub credentials to copy repositories. It states 370 card-related records were affected, but says there is no confirmed intrusion into the production DB or impact to customer financial institution credentials.
- Information involved
- Auth tokenCard & payment dataFull name
- Cause / key point
- Cause is under investigation.About Abuse of credentials
- Industry
- Finance & insurance
- Listing / capital
- Listed company東証プライム 3994(マネーフォワード)
- Last updated
- October 20, 2026
Stock price reaction to the disclosureマネーフォワード / 東証プライム 3994
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "github"
Incidents where the damage spread through the same service or system.
Same attack method
- A日本経済新聞社(日経)2026.10.16 announced・Affected 1,830,000 records
- Sチャーム本店2026.09.01 announced・Affected 370,000 records
- Aウエーブ（Webアップロード）2026.04.01 announced・Affected 176,810 records
- Aシチズン時計（問い合わせ管理）2026.10.06 announced・Affected 100,000 people
- A損保ジャパン（SMILING ROAD）2026.10.07 announced・Affected 60,000 records
- SPingCAP2026.10.21 announced・Affected 50,000 people
Same industry
- Sアフラック生命保険2026.06.30 announced・Affected 4,400,000 people
- SCSアカウンティング株式会社2026.05.15 announced・Affected Unknown
- AFivot（IDARE）2026.10.13 announced・Affected 129,659 people
- Aビューカード（VIEW’s NET）2026.10.09 announced・Affected 4,030,000 records
- A大和証券2026.10.05 announced・Affected 220,000 records
- A第一ライフグループ・第一生命（人事）2026.10.02 announced・Affected 120,000 people
Attack method classification: Abuse of credentials(Logging in legitimately with leaked or guessed passwords)
Read the Abuse of credentials guide and national trends →