ZENB JAPAN（ZENB GARDEN）Data breach / unauthorized access incident
- Occurred on
- Unconfirmed
- Announced on
- October 9, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- 949 people
- Main impact
- Confirmed data leakage of 897 members; up to 949 persons may be affected, including email addresses, profiles, etc. The community has been suspended and is kept separate from the e-commerce site.
- Information involved
- Email addressUser / member ID
- Cause / key point
- Unauthorized access to the contracted vendor Commune.About Supply chain attacks (via vendors & shared services)
- Industry
- Food & dining
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "commune"
Incidents where the damage spread through the same service or system.
- Aマツダ（CLUB MAZDA COMMUNITY）2026.10.14 announced・Affected 4,103 people
- C渋谷未来デザイン（渋谷未来デザイン COMMUNITY）2026.10.11 announced・Affected 495 people
- SSコミューン（Commune・Commune for Work）2026.10.09 announced・Affected 307,000 people
- Sちとせグループ（ちとせアカデミー）2026.10.09 announced・Affected 843 people
- Aバンダイナムコエクスペリエンス（湾岸ミッドナイト アーケードポータル）2026.10.09 announced・Affected Unknown
- Aカルビー（絶品部「やめられない、とまらない」課）2026.10.09 announced・Affected Unknown
Incidents related to "メール・プロフィール"
Incidents where the damage spread through the same service or system.
Same attack method
- S第一興商（ビッグエコー等）2026.10.08 announced・Affected 8,631,000 records
- A旭化成セラピューティクス（Pharma DIGITAL）2026.10.06 announced・Affected 514,000 people
- A大和証券2026.10.05 announced・Affected 220,000 records
- CTOPPAN（損保ジャパン）2026.09.29 announced・Affected 177,426 people
- A大東ガス株式会社2026.09.28 announced・Affected 124,000 records
- A大阪大学2026.10.21 announced・Affected 77,851 people
Same industry
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SSライドオンエクスプレス（『銀のさら・釜寅・すし上等』公式サイト・公式アプリ）2026.10.13 announced・Affected 6,500,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- SSニチレイグループ2026.09.18 announced・Affected Unknown
- Sアサヒグループホールディングス2026.07.17 announced・Affected 1,525,000 records
- S佐嘉平川屋2026.06.15 announced・Affected Unknown
Attack method classification: Supply chain attacks (via vendors & shared services)(Compromising the provider instead of the user)
Read the Supply chain attacks (via vendors & shared services) guide and national trends →