吉野家・はなまる(ApplyNow)Data breach / unauthorized access incident
- Occurred on
- September 7, 2026
- Announced on
- September 30, 2026
- Severity
- BIncidents centered on names and contact details.
- Scale
- 418 accounts
- Main impact
- It has been confirmed that attribute data of 5,366 applicants and encrypted passwords for 418 recruiter accounts were leaked. Interview videos were excluded.
- Information involved
- Email addressPasswordHome addressFull nameDate of birth
- Cause / key point
- Unauthorized access exploiting a vulnerability in a data analysis tool.About Exploitation of vulnerabilities
- Industry
- Food & dining
- Listing / capital
- Listed company東証プライム 9861(吉野家ホールディングス)
吉野家 and はなまる are brands of 吉野家ホールディングス.
- Last updated
- October 20, 2026
Stock price reaction to the disclosure吉野家ホールディングス / 東証プライム 9861
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "applynow"
Incidents where the damage spread through the same service or system.
Same attack method
- SSHelpfeel(Gyazo)2026.09.16 announced・Affected 23,620,000 records
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSSアドベンチャー(スカイチケット)2026.10.10 announced・Affected 14,640,000 records
- SSSKDDI(ISP事業者向けメール基盤)2026.06.23 announced・Affected 12,231,954 people
- Sムラウチドットコム2026.09.15 announced・Affected 7,710,000 records
- Sホワイトエッセンス(予約・基幹システム)2026.10.05 announced・Affected 1,050,000 accounts
Same industry
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SSライドオンエクスプレス(『銀のさら・釜寅・すし上等』公式サイト・公式アプリ)2026.10.13 announced・Affected 6,500,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- SSニチレイグループ2026.09.18 announced・Affected Unknown
- Sアサヒグループホールディングス2026.07.17 announced・Affected 1,525,000 records
- S佐嘉平川屋2026.06.15 announced・Affected Unknown
Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)
Read the Exploitation of vulnerabilities guide and national trends →