[REVISION HISTORY]
Cyberattacks on Japanese retail, educational, and public-tax
Updated 2 times since CLSTR started tracking revisions of this situation.
What changed
2026-10-21 01:23 UTC → 2026-10-21 06:39 UTC ·
added
removed
Cyberattacks on Japanese retail retail, educational, and educational services public-tax
Following the discovery of unauthorized access to internal systems on October 15, Geo and its parent company, Second Retailing, suspended several online services. Emergency system maintenance began on October 17 to prevent secondary damage, impacting the Geo Online store, home delivery services, and certain app membership functions. While physical retail locations remained open, customers were advised to use physical or digital Ponta cards for transactions. As the investigation continued with external security specialists, reports indicated that multiple Japanese companies were affected by unauthorized access. While Geo company worked to determine the scope of the impact and whether personal information was leaked, other entities impact. Other entities, such as Golf Digest Online Online, confirmed specific data breaches involving the personal information of employees employee and certain customer identifiers. On October 19, the scope of the disruptions expanded. Retailer Joshin announced its network was compromised by a third party, leading to the suspension of certain services; the company noted that compromised, noting the “possibility of personal information leakage cannot be ruled out” and has notified the Personal Information Protection Commission. out.” Additionally, the educational corporation Shudo Gakuen reported unauthorized access to its servers. The breach that potentially exposed names, addresses, and bank account information of faculty, staff, faculty and external instructors, as well as business partner data, though partners. New reports indicate a significant surge in attacks across various sectors. The hometown tax portal ‘Furusato Choice,’ operated by Trust Bank, suffered a massive leak of approximately 4.45 million pieces of personal information, including names, addresses, phone numbers, and hashed passwords. In the institution stated financial sector, Iwai Cosmo Securities reported that student information was not included an attack on an external contractor led to unauthorized trading orders in seven accounts. Security researchers at GMO Cyber Security by Ierae identified the compromised data. use of ‘ARTEX,’ an AI-driven autonomous penetration testing tool, in attacks targeting roughly 80 Japanese companies. Experts warn this tool allows attackers to automate complex tasks, such as bypassing Web Application Firewalls. The impact has also reached the public sector, with potential data leaks reported in several prefectural police departments and a Ministry of Land, Infrastructure, Transport and Tourism subsidy program.
Versions
- 2026-10-21 06:39 UTC Cyberattacks on Japanese retail, educational, and public-tax
- 2026-10-21 01:23 UTC Cyberattacks on Japanese retail and educational services
- 2026-10-19 23:35 UTC Cyberattacks on Japanese retail and online services
Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.