Tokyu Land websites breached; 4,082 personal information records potentially leaked
Tokyu Land Corporation detected unauthorised access in the shared AWS server environment hosting websites it manages on 19 October 2026 and disclosed it on 30 October. The attack exploited a CMS software vulnerability and inadequate server access permission settings, potentially exposing 4,079 GREEN CROSS PARK membership records and three GREENUP Cooldown Project enquiry records. The company urgently took the affected sites offline and carried out security measures and an investigation, but no actual data leak has been confirmed.
Key facts
- Affected organisation
- Tokyu Land Corporation
- Incident type
- Hacking & intrusion
- Occurred / detected
- 2026-10-19
- Scale of damage
- A total of 4,082 personal information records from two websites may have been leaked: 4,079 membership records and three enquiry records. An actual leak has not been confirmed.
- Cause / method
- Unauthorised website access
- Location
- Japan
Timeline
- Unauthorised access to websites managed by Tokyu Land Corporation became public.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.