ティンパンアレイ（ワールド連結子会社）Data breach / unauthorized access incident
- Occurred on
- October 17, 2026
- Announced on
- October 30, 2026
- Severity
- BIncidents centered on names and contact details.
- Scale
- 1,200,000 records
- Main impact
- The business server of ワールド's consolidated subsidiary ティンパンアレイ was subjected to unauthorized access, and member information totaling 約120万件 — including names, addresses, telephone numbers, dates of birth, gender, and email addresses — may have been leaked externally.
- Information involved
- Full nameHome addressPhone numberDate of birthEmail address
- Cause / key point
- It is reported that a third party illegally accessed the business server and performed operations to extract data.
- Industry
- Retail & e-commerce
- Sources
- Last updated
- October 31, 2026
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- A佐川急便（お荷物問い合わせ）2026.10.01 announced・Affected 53,230,000 records
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- SS株式会社アンドエスティHD2026.10.23 announced・Affected 2,500,000 people
- SS株式会社フューチャーショップ（futureshop）2026.10.23 announced・Affected 3,147,469 records
- S阪急阪神百貨店（H2O ID等）2026.10.19 announced・Affected 1,260,000 records
- Sパピレス（Renta!）2026.10.19 announced・Affected Unknown
- Sジグザグ（WorldShopping）2026.10.19 announced・Affected 301 people
- Sアクティブ（通販サイト）2026.10.06 announced・Affected 54,916 records
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →