株式会社シグナルトーク(Maru-Jan)Data breach / unauthorized access incident
- Occurred on
- November 4, 2026
- Announced on
- November 7, 2026
- Severity
- SSLarge-scale compromise of sensitive data such as payment or identity-verification records affecting millions.
- Scale
- 1,855,578 people
- Main impact
- Email addresses and passwords of 185万5,578 members were downloaded externally, resulting in a large-scale credential leak.
- Information involved
- Email addressPassword
- Cause / key point
- Data exfiltration via unauthorized access that exploited a management system function.About Abuse of credentials
- Compensation & remedies
- Announced it will provide 3,000 points (3,000 yen) per member.
- Industry
- Services & other
- Listing / capital
- Unlisted
- Last updated
- November 9, 2026
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "ダウンロード"
Incidents where the damage spread through the same service or system.
Same attack method
- A日本経済新聞社(日経)2026.10.16 announced・Affected 1,830,000 records
- Sチャーム本店2026.09.01 announced・Affected 370,000 records
- ACAMPFIRE2026.06.02 announced・Affected 225,846 accounts
- Aウエーブ(Webアップロード)2026.04.01 announced・Affected 176,810 records
- Aシチズン時計(問い合わせ管理)2026.10.06 announced・Affected 100,000 people
- B損害保険ジャパン2026.11.05 announced・Affected 65,000 records
Same industry
- SSアソビュー2026.11.03 announced・Affected 15,821,184 records
- SSリクルート(カーセンサーnet、C-MATCH)2026.10.21 announced・Affected 3,709,551 records
- SENEOSパワー(ENEOSでんき・でんきサービスのお客さまページ)2026.10.28 announced・Affected 57 people
- S日本郵政(ゆうID・ゆうゆうポイント)2026.10.19 announced・Affected 249 accounts
- Sスクウェア・エニックス2026.10.19 announced・Affected Unknown
- S第一興商(ビッグエコー等)2026.10.08 announced・Affected 8,631,000 records
Attack method classification: Abuse of credentials(Logging in legitimately with leaked or guessed passwords)
Read the Abuse of credentials guide and national trends →