楽天ドライブData breach / unauthorized access incident
- Occurred on
- January 29, 2026
- Announced on
- October 6, 2026
- Severity
- SSLarge-scale compromise of sensitive data such as payment or identity-verification records affecting millions.
- Scale
- 15,382 accounts
- Main impact
- Confirmed that stored photos, documents, etc. for 15,382 accounts were obtained and viewed. For a separate category of 313 accounts, encrypted passwords and similar data were also affected.
- Information involved
- User / member IDPassword
- Cause / key point
- Unauthorized system access due to illicit acquisition of an administrative account's authentication credentials.About Abuse of credentials
- Industry
- IT & telecom
- Listing / capital
- UnlistedParent company: 楽天グループ(東証プライム 4755)
楽天ドライブ is a subsidiary of 楽天グループ.
- Last updated
- October 20, 2026
Stock price reaction to the disclosure楽天グループ・親会社 / 東証プライム 4755
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Other incidents at 楽天ドライブ
Same attack method
- A日本経済新聞社(日経)2026.10.16 announced・Affected 1,830,000 records
- Sチャーム本店2026.09.01 announced・Affected 370,000 records
- ACAMPFIRE2026.06.02 announced・Affected 225,846 accounts
- Aウエーブ（Webアップロード）2026.04.01 announced・Affected 176,810 records
- Aシチズン時計（問い合わせ管理）2026.10.06 announced・Affected 100,000 people
- Bイノベーション（GitHub）2026.08.07 announced・Affected 62,689 people
Same industry
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSコミューン（Commune・Commune for Work）2026.10.09 announced・Affected 307,000 people
- SSIDCフロンティア（IDCFクラウド）2026.10.07 announced・Affected 48 records
- SSHelpfeel（Gyazo）2026.09.16 announced・Affected 23,620,000 records
- SPingCAP2026.10.21 announced・Affected 50,000 people
Attack method classification: Abuse of credentials(Logging in legitimately with leaked or guessed passwords)
Read the Abuse of credentials guide and national trends →