マネーフォワード(グループ各社の問い合わせフォーム、Webサイト運営委託先: Studio)Data breach / unauthorized access incident
- Occurred on
- September 30, 2026
- Announced on
- October 26, 2026
- Severity
- BIncidents centered on names and contact details.
- Scale
- 8,109 records
- Main impact
- Due to unauthorized access to the external service “Studio” used to operate some group websites, it was disclosed that inquiry form information for approximately 8,109 records may have been leaked: マネーフォワード (recruitment site) 4,150, マネーフォワードホーム 713, マネーフォワードエックス 257, マネーフォワードケッサイ 2,984, and アウトルックコンサルティング 5 (inquiry form information: name, company name, email address, phone number, inquiry details, etc.). There was no impact on recruitment application information (resumes, etc.) or the core services, and as of now no confirmed leakage, third-party acquisition, or secondary damage has been identified; all forms on Studio were disabled and migrated to a different system.
- Information involved
- Full nameEmail addressPhone number
- Cause / key point
- Unauthorized third-party access to the website building and hosting service “Studio” (occurred from 2026年9月30日〜10月1日に by exploiting a vulnerability; Studio addressed it on 10月14日).About Exploitation of vulnerabilities
- Industry
- Finance & insurance
- Listing / capital
- Listed companyTSE Prime 3994(マネーフォワード)
- Sources
- Last updated
- October 29, 2026
Stock price reaction to the disclosureマネーフォワード / 東証プライム 3994
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Other incidents at マネーフォワード
Incidents related to "フォーム"
Incidents where the damage spread through the same service or system.
- B中日サービス(問い合わせフォーム)2026.10.22 announced・Affected 112 records
- Bデジタル庁(ホームページ問い合わせフォーム、運営の一部委託先: Studio)2026.10.22 announced・Affected 13,358 records
- Bフジッコ2026.10.22 announced・Affected 15,500 records
- Aand US(Studio問い合わせフォーム)2026.10.19 announced・Affected 1,024 records
- A長崎市(長崎満喫!アウェイ遠征応援キャンペーン)2026.10.19 announced・Affected 19 people
- A志摩市民病院(問い合わせフォーム)2026.10.19 announced・Affected 8 records
Incidents related to "studio"
Incidents where the damage spread through the same service or system.
- A青森市(公民連携ポータルサイト)2026.10.19 announced・Affected 11 records
- B秋田県(あきたデジタルアカデミー)2026.10.19 announced・Affected 164 people
- B広島県府中市(道の駅びんご府中サイト)2026.10.19 announced・Affected 123 records
- B福岡コンベンションセンター(問い合わせ・予約フォーム)2026.10.19 announced・Affected 1,185 records
- B岐阜県(GIFU新事業共創チャレンジ)2026.10.19 announced・Affected 2 records
- Bメディアリンク(Studio問い合わせフォーム)2026.10.19 announced・Affected 901 records
Same attack method
- Bユミルリンク(メール配信システムCuenote FC・Cuenote BASE)2026.10.19 announced・Affected 51,628,280 records
- SSHelpfeel(Gyazo)2026.09.16 announced・Affected 23,620,000 records
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSSKDDI(ISP事業者向けメール基盤)2026.06.23 announced・Affected 12,231,954 people
- Sムラウチドットコム2026.09.15 announced・Affected 7,710,000 records
- SS株式会社フューチャーショップ(futureshop)2026.10.23 announced・Affected 3,147,469 records
Same industry
- Sアフラック生命保険2026.06.30 announced・Affected 4,400,000 people
- SCSアカウンティング株式会社2026.05.15 announced・Affected Unknown
- Aソニー生命保険2026.10.28 announced・Affected 385,000 records
- AFivot(IDARE)2026.10.13 announced・Affected 129,659 people
- Aビューカード(VIEW’s NET)2026.10.09 announced・Affected 4,030,000 records
- Aオリックス生命(業務委託先スカラコミュニケーションズのFAQシステム「i-ask」)2026.10.08 announced・Affected 26,500 records
Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)
Read the Exploitation of vulnerabilities guide and national trends →