JP — ITmedia

METI's "Dentrinet" Suspended After Unauthorized Access; Site for Electricity and Gas Operators' Periodic Reports

SecurityOctober 29, 20261 min read

Japan's trade ministry (METI) has shut down 'Dentrinet', a website where electricity and gas companies send regular reports. The site was hit by unauthorized access, which means someone got into it without permission.

What happened

On October 28, 2026, the Electricity and Gas Market Surveillance Commission, which works under METI, said that Dentrinet had been accessed without permission and shut down. Reports are now being taken by email until the site is back. The commission is still checking whether any information was leaked.

Key facts

The unauthorized access happened early in the morning on October 27, 2026.
The commission confirmed it on October 28, 2026.
Dentrinet is used to send sales volumes and contract counts online.
Whether data was leaked is still 'being checked'.

What Dentrinet is

Dentrinet is an online system. Electricity retailers and gas retailers use it to send regular reports to the government. The reports include how much power or gas they sold and how many contracts they have.

Why it matters

Government reporting sites hold important business data. If a site is hacked, companies and the public may face risks. The story also comes after several other cyberattacks in Japan, so people are watching closely for more problems.

What to watch

Whether the commission finds that data was leaked.
When Dentrinet will be back online.
What caused the attack and how the system will be made safer.
Whether more government or energy companies report similar attacks.

Matsuya suspends official app and website after detecting unauthorized access; mobile ordering and bento reservations also unavailable

Matsuya Foods, which operates the Matsuya beef bowl chain, announced by October 29 that it had suspended its official app and website after detecting unauthorized access from outside. The bento reservation service "Matsuben Net," mobile ordering, and the "Matsuben Delivery" service are all unavailable, and the company says it is working to identify the cause and scope of impact.

Security전자신문Oct 29

Signs Suggest Hackers Took Over 25 Servers by Exploiting PHP Flaw; South Korea Also Targeted

Researchers at Dream Research, the security unit of Israeli cybersecurity firm Dream, reported signs that attackers exploiting a recently discovered PHP vulnerability took over 25 servers, including a U.S. government-related system. Of about 240 firewalls in South Korea, the U.S., Japan, and Taiwan that were targeted, 24 had root access obtained, and the investigation found no confirmed evidence of a China-linked group or AI-written attack code.

SecurityITmediaOct 29

Users Report Losing All Funds From Bank Linked to PayPay; PayPay Explains Causes and Countermeasures

A post on X drew attention in late October after a user reported that money was charged from a bank account linked to PayPay into their balance and then sent out without their knowledge. PayPay told ITmedia that unauthorized transfers from devices suspected of malware infection have been increasing since around August, and it is strengthening monitoring and countermeasures. The company advises users to avoid installing apps from outside official stores, to deny permissions that allow remote control of their phone, and to set spending limits.

SecurityThe VergeOct 29

A hacker stole more than 40,000 DHS employee records

A hacker stole personal information on more than 41,000 Department of Homeland Security employees, including staff at ICE and CBP, according to TechCrunch and Wired. The exposed data includes names, job titles, phone numbers, email addresses, and office locations, and it also links the agencies to specific surveillance tools. The hacker, known as "Department of Peace," reportedly accessed the data through Okta, an identity and access management service used by the DHS.