Tokyo DispatchJapan, in EnglishThe group that advertises the world's strongest white-hat hackers took two and a half months to notice an intrusion, and says it still cannot explain why a vulnerability flagged by its own specialists was never fixed.
The retailer found unauthorized access on November 6 and says intruders may also have been inside its systems in mid-to-late October, with corporate members among those affected.
The carrier widened its list of exposed data to include identity-verification document numbers and contract details, and says it is considering payments to affected users.
Junichi Miyagawa said the attack exploited a flaw in open-source software the company had never checked, and that stopping services to cut off intruders now takes priority.
The furniture giant confirmed unauthorized access to its systems on Nov. 6, with names, addresses and purchase histories possibly exposed.
Ryohin Keikaku postponed the relaunch of its MUJI online store after a third party reported a list-type attack using stolen IDs and passwords, widening a breach that may already cover 27.26 million people.
Unauthorized access at the printing service Rakusul may have exposed print data and invoice details, as Trend Micro links a surge in leaks to autonomous AI-agent attacks.
Hiroshi Miyashita of Chuo University says companies collect personal data they do not need and will not delete, and that keeping less would be the best defense against cyberattacks.
EFS says a supplier's cooling equipment was targeted and temperatures climbed to an "extremely high level" before staff intervened. Supermarket fridges and freezers in several European countries have been hit too.
A cabinet meeting on Nov 6 approved a package to tighten corporate basics and strengthen "proactive cyber defense," after a run of breaches blamed on weak systems and misconfigured websites.
A Tokyo company handling My Number card appointment emails for the city was breached on October 28, and the city has halted reservation messages while it checks the system.
The government will announce emergency measures on Nov. 6, including a push to close vulnerabilities firms already knew about and defenses built on high-performance AI.
More than 160,000 orderers' names were exposed after unauthorized access to a system run by a company handling part of the 7NOW delivery service. Card details and passwords were not affected, the chain says.
Masatoshi Kumagai fronted the group's response to a major data breach himself. The apology became a monologue, and governance concerns showed up in the stock.
JNSA took its information-security quiz service offline after confirming the breach on November 4, and says it has not yet traced how the intruder got in.
The doll maker shut its AZONET shop after a breach exposed customer email addresses, and will keep selling through Rakuten instead. Other chains are also shedding the data they keep.
A Tokyo security firm demonstrated ARTEX, a vulnerability scanner built to run on top of other AI models. Researchers say Chinese hackers favor DeepSeek to power it because its guardrails are loose.
More than 13,000 email addresses were exposed through an outside mailing service, and an intrusion at the Marines' official site pulled down nicknames and member emails.
