# Commune Inc. data breach

> Live situation record from CLSTR: https://clstr.news/situations/commune-inc-data-breach
> Updated: 2026-10-12T21:15:03.000Z. Sources: 4. Developments: 2.

Commune Inc., a provider of online community services, reported a data breach affecting approximately 307,000 users across its ‘Commune’ and ‘Commune for Work’ platforms. Attackers exploited system vulnerabilities to impersonate administrators, allowing them to view, extract, or overwrite member data. The breach included the exposure of display names, self-introductions, and email addresses for various users, including employees and demo accounts.

Several organizations utilizing Commune’s infrastructure reported impacts. Yamaha Motor Co., Ltd. confirmed that the personal information of approximately 1,600 members of its ‘YAMAHA PAS Life’ community site may have been compromised. The potential leak, occurring on October 6, included data such as names, dates of birth, gender, addresses, and member IDs, though Yamaha stated no unauthorized access to its own internal systems was confirmed and credit card information remained secure.

Other entities reported as potentially affected include Suzuki, Koikeya, Morinaga Milk Industry, Bandai Namco Experience, and Aomori Prefecture’s tourism community. While passwords were generally not compromised, 144 members had their passwords changed to temporary ones without authorization. Commune Inc. has since implemented security measures to block unauthorized access and began a phased resumption of services.

## Timeline

### 2026-10-12: Yamaha Motor reports potential data leak of 1,600 members

Yamaha Motor reported a potential data breach affecting approximately 1,600 ‘YAMAHA PAS Life’ members due to unauthorized access at its infrastructure provider, Commune Corporation.

2 sources. https://clstr.news/cluster/yamaha-motor-reports-potential-data-leak-of-1600-members

### 2026-10-09: Commune Inc. reports data breach affecting 307,000 users

Commune Inc. reported a data breach affecting approximately 307,000 users across various community platforms, including those operated by Yamaha and Suzuki, due to unauthorized system access.

3 sources. https://clstr.news/cluster/commune-inc-reports-data-breach-affecting-307000-users

---
Cite as: Commune Inc. data breach. CLSTR, https://clstr.news/situations/commune-inc-data-breach
