Skip to content
JAENES
BPossible leakOctober 22, 2026 announced

スパイラルローキャス（職員参集システム）Data breach / unauthorized access incident

笹尾 祐太朗の写真Reviewed by Yutaro SasaoWritten by Leak Watch editorial team published ・ updated
Occurred on
October 20, 2026
Announced on
October 22, 2026
Severity
BIncidents centered on names and contact details.
Scale
3,000 records
Main impact
In the municipality-targeted 「職員参集システム」, it was confirmed that a third party illegally logged into the management screens of two customer (municipality) environments from the night of 2026-10-20 to the early morning of 2026-10-21. Investigation found that registrant information for the affected customers (names, affiliation information, etc., about 3,000 records) may have been exposed; a report has been made to 個人情報保護委員会. As recurrence prevention, IP restriction for access to the management screens has been made mandatory and users have been asked to strengthen/reset passwords, and individual contact to customers with confirmed unauthorized login has been completed.
Information involved
Full name
Cause / key point
Unauthorized third-party logins to customers' management screen environments.About Abuse of credentials
Industry
IT & telecom
Listing / capital
Unlisted
Sources
Last updated
October 23, 2026

Where to go for this information

The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.

Full nameHow severity is assessed →

Is this incident worth paying attention to?

Written & reviewed

笹尾 祐太朗の写真

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.

CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.

Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:

Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction

Related incidents

Browse the database →

Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).

Same attack method

Same industry

Attack method classification: Abuse of credentials(Logging in legitimately with leaked or guessed passwords)

Read the Abuse of credentials guide and national trends →

← Back to Breach Watch