シェアフル株式会社（シェアフル）Data breach / unauthorized access incident
- Occurred on
- November 4, 2026
- Announced on
- November 9, 2026
- Severity
- SSLarge-scale compromise of sensitive data such as payment or identity-verification records affecting millions.
- Scale
- 7,500,000 accounts
- Main impact
- A third-party unauthorized access to the internal management system of the gig work app "シェアフル" may have resulted in the external leak of up to approximately 7,500,000 personal accounts and up to approximately 7,500 hiring companies. May include names, contact details, addresses, dates of birth, bank account information, and residence-status–related information.
- Information involved
- Email addressFull namePhone numberHome addressDate of birthIdentity verification data
- Cause / key point
- Information is said to have been taken out by a third party’s unauthorized access to the internal management system, but the intrusion route and detailed cause have not been disclosed.
- Industry
- Services & other
- Last updated
- November 10, 2026
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- A佐川急便（お荷物問い合わせ）2026.10.01 announced・Affected 53,230,000 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bモスフードサービス（モス WEB 会員）2026.11.04 announced・Affected 7,500,000 records
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
- SSヤマト運輸(クロネコ代金後払いサービス)2026.09.29 announced・Affected 5,310,000 records
Same industry
- SS株式会社シグナルトーク（Maru-Jan）2026.11.07 announced・Affected 1,855,578 people
- SSアソビュー2026.11.03 announced・Affected 15,821,184 records
- SSリクルート（カーセンサーnet、C-MATCH）2026.10.21 announced・Affected 3,709,551 records
- SENEOSパワー（ENEOSでんき・でんきサービスのお客さまページ）2026.10.28 announced・Affected 57 people
- S日本郵政（ゆうID・ゆうゆうポイント）2026.10.19 announced・Affected 249 accounts
- Sスクウェア・エニックス2026.10.19 announced・Affected Unknown
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →