JP — ITmedia
Unauthorized Access Hits Security Awareness Group; Up to 15,000 Personal Records Possibly Leaked
Security1 min read
JNSA, a Japanese group that promotes information security, says hackers may have stolen up to 15,128 people's personal data from its security quiz service. The service has been shut down while the group investigates.
What happened
JNSA (Japan Network Security Association) said on November 6, 2026, that an outsider broke into its "Information Security Understanding Check Service." Companies use this service to test how well their staff understand computer security. The group found the break-in on November 4. It has stopped the service and is working with outside experts to find the cause and the damage.
Key numbers and facts
- Up to 15,128 personal records may have leaked.
- The attack may have started around the evening of October 30, 2026.
- Leaked data may include user IDs and scrambled (hashed) passwords.
- Other data may include company names, email addresses, office locations, number of employees, industry, and number of users.
- The total number of leaked records could still change.
Some background
The service lets a company's manager sign up staff for security training and check their results. Because it holds company and employee details, it is a useful target for criminals. A hashed password is a scrambled version of a password, which makes it harder, but not impossible, to read.
Why it matters
People whose data was taken may get fake emails that look real. JNSA warns users not to open suspicious email links or attachments. The case also shows that even groups that teach security can be hacked. JNSA plans to contact affected people one by one once they are identified and to report to the Personal Information Protection Commission on November 6.
What to watch
- How many people are actually affected, since the number may change.
- How the attackers got in. The entry route is not yet known.
- Whether the service comes back online, and when.
- Whether the Personal Information Protection Commission takes action.
Glossary
- JNSA
- The Japan Network Security Association, a group that promotes computer security awareness in Japan.
- Information Security Understanding Check Service
- An online test that companies use to check how well their staff understand computer security.
- Personal Information Protection Commission
- A Japanese government body that watches over how companies handle personal data.