JP — ITmedia

Personal Data Leaks from Unauthorized Access Reach 260 Million Cumulative Individuals in Just Over Half a Year, More Than Twice Japan's Population

SecurityOctober 29, 20261 min read

Japan's Personal Information Protection Commission says that from April 1 to October 16, 2026, unauthorized access led to leaks, or possible leaks, of personal data affecting about 260 million people in total. That is more than twice Japan's population.

What happened

Japan's privacy watchdog, the Personal Information Protection Commission, reported the numbers on October 28, 2026. The count covers cases of personal data leaks, and cases where leaks may have happened, that were caused by unauthorized access to computer systems. The total number of affected people is about 260 million, counted in a way that includes repeats.

Key numbers

Total reported cases from April 1 to October 16, 2026: 2,094
Monthly cases: April 166, May 163, June 185, July 212, August 235, September 303
October cases up to the 16th: 830, about 2.7 times September's total
October made up about 40% of all cases in the period
Average cases per day: about 52 in October, compared with about 10 in September

Background

Unauthorized access means someone gets into a computer system without permission. This can expose names, addresses, and other personal details. The total of 260 million is a sum of counts, so the same person may be counted more than once. It does not mean 260 million different people were harmed.

Why it matters

The number of reported cases rose sharply in the autumn, and the trend is worrying. Many companies may be facing attacks. Because the figures come from early reports, they may change as investigations continue.

What to watch

Updated counts as companies finish their investigations
Whether the number of new cases keeps rising
The data covers only reports sent directly to the commission by private companies, so government and agency reports are not included

Glossary

Personal Information Protection Commission: The Japanese government group that watches over how companies protect people's personal data.
unauthorized access: Getting into a computer system or account without permission.

Over 40,000 U.S. Security Agency Employee Records Leaked

Hackers breached the U.S. Department of Homeland Security (DHS) and stole personal data of more than 40,000 employees, according to the nonprofit leak-focused group Distributed Denial of Secrets, which said it obtained the data from a group calling itself "Department of Peace." The dataset includes names, titles, phone numbers, emails and office addresses of staff at agencies such as ICE, CBP, HSI and CISA, and TechCrunch verified parts of it by matching names of security personnel. DHS said it is aware of the security risk, is actively responding, and will publicly update as more information becomes available.

Security전자신문Oct 29

[2026 Innovation Solutions] Verkada Integrates Video and Access Control with AI, Pushing Physical Security Innovation

Cloud-based physical security company Verkada presented its AI-driven next-generation physical security strategy at "Innovation Solution Day 2026" on the 29th. The company is consolidating video surveillance, access control, and other previously separate systems, and it introduced new product lines, hardware, and AI-based features at its annual "Verkada One" event, all centered on its "Command" cloud platform.

SecurityITmediaOct 29

Matsuya suspends official app and website after detecting unauthorized access; mobile ordering and bento reservations also unavailable

Matsuya Foods, which operates the Matsuya beef bowl chain, announced by October 29 that it had suspended its official app and website after detecting unauthorized access from outside. The bento reservation service "Matsuben Net," mobile ordering, and the "Matsuben Delivery" service are all unavailable, and the company says it is working to identify the cause and scope of impact.