ワサビ(WASABI SWITCH)Data breach / unauthorized access incident
- Occurred on
- July 4, 2026
- Announced on
- July 6, 2026
- Severity
- SCompromise of deep personal data or usable credentials.
- Scale
- Unknown
- Main impact
- The development database was exfiltrated and deleted, and some production API keys and administrator account information were stolen, so keys were revoked and reissued. It was announced that real customer order data were not included.
- Information involved
- User / member IDPasswordAuth token
- Cause / key point
- Unauthorized access to a development database that was directly accessible from the Internet.
- Industry
- IT & telecom
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bユミルリンク(メール配信システム)2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSコミューン(Commune・Commune for Work)2026.10.09 announced・Affected 307,000 people
- SSIDCフロンティア(IDCFクラウド)2026.10.07 announced・Affected 48 records
- SS楽天ドライブ2026.10.06 announced・Affected 15,382 accounts
- SSHelpfeel(Gyazo)2026.09.16 announced・Affected 23,620,000 records
- SPingCAP2026.10.21 announced・Affected 50,000 people
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →