# Unauthorized access to Japanese mobile applications

> Developing situation record from CLSTR: https://clstr.news/situations/unauthorized-access-to-japanese-mobile-applications
> Updated: 2026-10-18T15:46:15.000Z. Sources: 9. Developments: 2.

On October 17, the Japan Football Association (JFA) reported that its official ‘JFA Passport’ app was subject to unauthorized access by a third party. The incident occurred between approximately 3:25 AM and 7:00 PM.

In response, the JFA worked with the app’s service provider to block the access route, leading to the temporary suspension of some services. The association is currently investigating the extent of the impact and whether any personal user information was leaked. While no impact has been confirmed on other systems, the JFA has advised users to avoid logging out, re-logging, or reinstalling the app to assist in stabilizing the service.

## Timeline

### 2026-10-18: Japan Football Association investigates unauthorized access to JFA Passport app

The Japan Football Association is investigating unauthorized access to its ‘JFA Passport’ app following a security incident on October 17. Some services are suspended while the extent of data impact is assessed

5 sources. https://clstr.news/cluster/japan-football-association-investigates-unauthorized-access-to-jfa-passport-app

### 2026-09-30: Japan Post reports potential data leak via Postal Service App

Japan Post reported a potential data leak affecting 19 users due to unauthorized access to its Postal Service App and Yu ID service, exposing names, addresses, and shipping details.

7 sources. https://clstr.news/cluster/japan-post-reports-potential-data-leak-via-postal-service-app

---
Cite as: Unauthorized access to Japanese mobile applications. CLSTR, https://clstr.news/situations/unauthorized-access-to-japanese-mobile-applications