VALX（VALX FUNコミュニティ）Data breach / unauthorized access incident
- Occurred on
- October 6, 2026
- Announced on
- October 8, 2026
- Severity
- BIncidents centered on names and contact details.
- Scale
- 2,950 people
- Main impact
- Due to unauthorized access impersonating an administrator of Commune, the email addresses, member names, profiles, etc. of 2,950 members may have been viewed or obtained. Information in the メンバーズストア is not affected.
- Information involved
- Email addressUser / member ID
- Cause / key point
- Unauthorized access by impersonating an administrator, exploiting multiple deficiencies in a vendor's system.About Supply chain attacks (via vendors & shared services)
- Industry
- Services & other
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "commune"
Incidents where the damage spread through the same service or system.
- Aマツダ（CLUB MAZDA COMMUNITY）2026.10.14 announced・Affected 4,103 people
- C渋谷未来デザイン（渋谷未来デザイン COMMUNITY）2026.10.11 announced・Affected 495 people
- SSコミューン（Commune・Commune for Work）2026.10.09 announced・Affected 307,000 people
- Sちとせグループ（ちとせアカデミー）2026.10.09 announced・Affected 843 people
- Aバンダイナムコエクスペリエンス（湾岸ミッドナイト アーケードポータル）2026.10.09 announced・Affected Unknown
- Aカルビー（絶品部「やめられない、とまらない」課）2026.10.09 announced・Affected Unknown
Incidents related to "メール"
Incidents where the damage spread through the same service or system.
- B東郷町（地域安心メール・高齢者捜索メール）2026.10.13 announced・Affected Unknown
- Aファイバーゲート（クラウド利用サービス）2026.10.09 announced・Affected Unknown
- A日本能率協会マネジメントセンター（時間〈とき〉ラボ）2026.10.09 announced・Affected 2,950 people
- ALIXIL（すまいひろば・猫壁ひろば）2026.10.09 announced・Affected Unknown
- B森永乳業（マウントカフェ部）2026.10.09 announced・Affected 291 people
- Bヤマハ（ヤマハネットワークエンジニア会）2026.10.09 announced・Affected 1,600 people
Same attack method
- S第一興商（ビッグエコー等）2026.10.08 announced・Affected 8,631,000 records
- A旭化成セラピューティクス（Pharma DIGITAL）2026.10.06 announced・Affected 514,000 people
- A大和証券2026.10.05 announced・Affected 220,000 records
- CTOPPAN（損保ジャパン）2026.09.29 announced・Affected 177,426 people
- A大東ガス株式会社2026.09.28 announced・Affected 124,000 records
- A大阪大学2026.10.21 announced・Affected 77,851 people
Same industry
- SSリクルート（カーセンサーnet、C-MATCH）2026.10.21 announced・Affected 3,709,551 records
- S日本郵政（ゆうID・ゆうゆうポイント）2026.10.19 announced・Affected 249 accounts
- Sセレス（ポイントインカム）2026.10.07 announced・Affected 195 records
- Sエバーグリーン・マーケティング（メール）2026.10.06 announced・Affected 763 records
- Sチケットプラス（チケプラ）2026.10.01 announced・Affected 107 people
- SEPARKリラク&エステ（PeakManager）2026.09.24 announced・Affected 22,180,000 records
Attack method classification: Supply chain attacks (via vendors & shared services)(Compromising the provider instead of the user)
Read the Supply chain attacks (via vendors & shared services) guide and national trends →