野村證券Data breach / unauthorized access incident
- Occurred on
- October 16, 2026
- Announced on
- October 23, 2026
- Severity
- CLimited data such as email addresses and identifiers.
- Scale
- Unknown
- Main impact
- Due to unauthorized access to a contractor's system, stored subscribers' email addresses and the like may have been leaked externally. It has been announced that portfolio information and securities trading account information are not included.
- Information involved
- Email address
- Cause / key point
- Information may have leaked externally due to unauthorized access to the contractor ユミルリンク's system.About Supply chain attacks (via vendors & shared services)
- Industry
- Finance & insurance
- Listing / capital
- UnlistedParent company: 野村ホールディングス
野村證券 is a major securities company within the 野村ホールディングス group.
- Sources
- Last updated
- October 25, 2026
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- S第一興商(ビッグエコー等)2026.10.08 announced・Affected 8,631,000 records
- A旭化成セラピューティクス(Pharma DIGITAL)2026.10.06 announced・Affected 514,000 people
- A大和証券2026.10.05 announced・Affected 220,000 records
- CTOPPAN(損保ジャパン)2026.09.29 announced・Affected 177,426 people
- A大東ガス株式会社2026.09.28 announced・Affected 124,000 records
- A大阪大学2026.10.21 announced・Affected 77,851 people
Same industry
- Sアフラック生命保険2026.06.30 announced・Affected 4,400,000 people
- SCSアカウンティング株式会社2026.05.15 announced・Affected Unknown
- Sマネーフォワード(GitHub)2026.05.01 announced・Affected 370 records
- AFivot(IDARE)2026.10.13 announced・Affected 129,659 people
- Aビューカード(VIEW’s NET)2026.10.09 announced・Affected 4,030,000 records
- A損保ジャパン(SMILING ROAD)2026.10.07 announced・Affected 60,000 records
Attack method classification: Supply chain attacks (via vendors & shared services)(Compromising the provider instead of the user)
Read the Supply chain attacks (via vendors & shared services) guide and national trends →