トレジャー・ファクトリー(出張買取・トレファク引越の案件管理システム)Data breach / unauthorized access incident
- Occurred on
- October 20, 2026
- Announced on
- October 23, 2026
- Severity
- CLimited data such as email addresses and identifiers.
- Scale
- 746,277 records
- Main impact
- Due to unauthorized access to the案件管理システム used for 「出張買取」 and 「トレファク引越」, the company disclosed that 746,277 customers' email addresses (of which 11 also include name and address), 750 names and email addresses of business partners/employees, and 1,000 names and device identifiers of employees, etc. may have been exposed. Payment information such as credit card data and customer information managed by stores/apps were not affected; the company reported to the Personal Information Protection Commission, consulted the police, and plans to resume the system around 10月28日.
- Information involved
- Email addressFull nameHome address
- Cause / key point
- The incident is believed to be unauthorized access exploiting a vulnerability related to database access in the案件管理システム (confirmed by an access-log investigation on 2026年10月20日).About Exploitation of vulnerabilities
- Industry
- Retail & e-commerce
- Listing / capital
- Listed companyTSE Prime 3093(トレジャー・ファクトリー)
- Sources
- Last updated
- October 29, 2026
Stock price reaction to the disclosureトレジャー・ファクトリー / 東証プライム 3093
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "クレジットカード"
Incidents where the damage spread through the same service or system.
- Aアドベンチャー(スカイチケット)2026.10.29 announced・Affected 32,341 records
- SENEOSパワー(ENEOSでんき・でんきサービスのお客さまページ)2026.10.28 announced・Affected 57 people
- S日本航空・日本トランスオーシャン航空(JTA、委託先: アマデウス)2026.10.28 announced・Affected 92,000 records
- Bベネフィット・ワン(会員優待サービス「トクかい」、共同提供: クレディセゾン、業務委託先: フォレステック)2026.10.28 announced・Affected 29,465 people
- SS楽天トラベル2026.10.26 announced・Affected 2,600,000 people
- SS株式会社フューチャーショップ(futureshop)2026.10.23 announced・Affected 3,147,469 records
Same attack method
- Bユミルリンク(メール配信システムCuenote FC・Cuenote BASE)2026.10.19 announced・Affected 51,628,280 records
- SSHelpfeel(Gyazo)2026.09.16 announced・Affected 23,620,000 records
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSSKDDI(ISP事業者向けメール基盤)2026.06.23 announced・Affected 12,231,954 people
- Sムラウチドットコム2026.09.15 announced・Affected 7,710,000 records
- Sホワイトエッセンス(予約・基幹システム)2026.10.05 announced・Affected 1,050,000 accounts
Same industry
- SS株式会社アンドエスティHD2026.10.23 announced・Affected 2,500,000 people
- S阪急阪神百貨店(H2O ID等)2026.10.19 announced・Affected 1,260,000 records
- Sパピレス(Renta!)2026.10.19 announced・Affected Unknown
- Sジグザグ(WorldShopping)2026.10.19 announced・Affected 301 people
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
- Sアクティブ(通販サイト)2026.10.06 announced・Affected 54,916 records
Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)
Read the Exploitation of vulnerabilities guide and national trends →