JP — ITmedia

Information Leaks: 16.2% of Companies Report Experience; Some Say They Don't Know Whether Incidents Occurred — Teikoku Databank Survey

SecurityOctober 19, 20261 min read

Teikoku Databank, a Japanese business research company, surveyed 1,328 companies about information leaks. About 16.2% said they had ever had a leak or a possible leak.

What happened

Teikoku Databank released the results of a survey on information leaks on October 19. The survey asked whether a company had ever had a leak or a possible leak, caused by human error or cyber attacks. The survey ran online from October 9 to 14, 2026, and got answers from 1,328 companies across Japan.

Key numbers

16.2% of companies said they had ever had a leak or possible leak.
5.5% had one within the past year.
10.7% had one more than a year ago.
30.2% of large companies had a leak, 14.0 points above the overall average.
Within the past year: 8.8% of large companies vs. 5.0% of small and medium companies.

Causes and examples

Companies that had leaks described human mistakes, such as sending an email to the wrong person. Others described outside attacks. One company received an email pretending to be from another company's staff. It seemed urgent, so the staff sent information without calling to check. Some companies also showed signs of an outside cyber attack.

Why it matters

Many companies do not know whether they have had a leak. Some said they lack the experts to check their data. Small companies said big clients ask them to improve security, but they often cannot pay for it or find staff. They asked for money and people to help, not just advice.

What to watch

Whether small companies get more help to protect their data.
Whether more companies find out about leaks they missed before.
How large companies with better detection systems respond to new attacks.

Glossary

Teikoku Databank: A Japanese company that researches and reports on businesses, and ran this survey.
cyber attack: An attempt by outsiders to break into computer systems or steal data.
human error: A mistake made by a person, such as sending a message to the wrong address.

Tioli Releases Emergency Response Guide for 'Node2Shell'

Tioli said on the 26th that it had independently reproduced and verified the Node.js vulnerability 'Node2Shell (CVE-2026-111497)', disclosed on the 21st, and published a response guide. The flaw stems from a memory-handling error when decompressing Brotli-compressed data, and Node.js rates its severity as High. Patched versions 22.23.4, 24.22.1, and 26.12.1 were released.

Security전자신문Oct 26

Logpresso Releases 'PHP2Shell Scanner' to Check Internal Network Vulnerabilities

Logpresso has released a 'PHP2Shell Scanner' app that diagnoses the PHP remote code execution vulnerabilities known as PHP2Shell. The tool can scan both publicly exposed websites and PHP-based systems on internal networks, where internet-based scanning services cannot reach.

SecurityVnExpressOct 26

The Privacy Risks of "Always-Listening" AI Devices

AI-enabled devices such as smart speakers, smartwatches and smart glasses that are always ready to respond can collect data, raising privacy concerns. Global shipments of AI glasses reportedly jumped to 8.4 million in 2025 from 2.1 million in 2024, according to Omdia data cited by Reuters. Experts warn that bystanders may be monitored without owning any device, and that AI can interpret far more collected information than earlier voice assistants.