Japan's STEPGOLF breach may have exposed personal data and facial photos
Unauthorized access to Japan's STEPGOLF business and reservation systems was found to be highly likely to have resulted in the leak of database backups and other data containing personal information on members and free trial applicants. A second notice on November 10 identified 114,605 personal information records as potentially affected, with about 107,000 facial photos and about 12,000 bank account records subsequently included. The data may include names, addresses, phone numbers, lesson records, and unencrypted bank account information, and the actual number of leaked records remains under investigation.
Key facts
- Affected organization
- STEPGOLF
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Potential leak of 114,605 personal information records, about 107,000 facial photos, and about 12,000 bank account records
- Cause / method
- Unauthorized access to business and reservation systems, potentially resulting in the external leak of database backups and other data
- Location
- Japan
If your data was exposed
Exposed dataNamePhone numberAddressBank accountUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- STEPGOLF announced unauthorized access to its business and reservation systems and a possible leak of database backups, identifying up to 215,000 registration records as potentially affected.
- In its second notice, STEPGOLF said that 114,605 personal information records, facial photos, bank account information, and other data were potentially affected.
- About 107,000 facial photos and about 12,000 bank account records were also reported to be potentially exposed.
- Personal information, including that of former members, was reported to be highly likely to have leaked, with the actual scope of the leak still under investigation.
19 related reports
- 当社業務システムへの不正アクセスによる個人情報漏えいのおそれに関するお詫びとご報告(第一報)
- ステップゴルフ 不正アクセスで会員個人情報漏えいの可能性 2026年11月7日
- ゴルフスクール「ステップゴルフ」の業務・予約システムに不正アクセス、会員・無料体験の申込者の氏名・住所・口座情報・顔写真などが漏えいした可能性(データベースの登録件数で最大21.5万件。漏えいの件数は調査中)
- ゴルフのレッスンカルテなど漏えいか 最大21万件超 ステップゴルフに不正アクセス
- 口座番号など漏洩か ゴルフスクールに不正アクセス
- 口座番号など漏洩か ゴルフスクールに不正アクセス(ABEMA TIMES)
- ステップゴルフ、不正アクセスで最大21万5,000件の個人情報漏えいのおそれ 銀行口座情報・顔写真・レッスンカルテも対象
- ステップゴルフで情報漏えいのおそれ|自分は対象?銀行口座の確認方法と最大21.5万件の影響
- 口座番号や顔写真、要配慮個人情報も……「ステップゴルフ」不正アクセス、最大21.5万件漏えいの可能性
- 口座番号や顔写真、要配慮個人情報も……「ステップゴルフ」不正アクセス、最大21.5万件漏えいの可能性(ITmedia NEWS)
- 当社業務システムへの不正アクセスによる個人情報漏えいのおそれに関するお詫びとご報告(第二報)
- ステップゴルフ情報漏洩・不正アクセス事案
- 「ステップゴルフ」顔写真や口座情報漏えいか 不正アクセスで
- ゴルフ教室運営会社で顔写真や口座漏えいか
- ステップゴルフ、顔写真や口座番号など23万件流出恐れ 不正アクセスで
- ゴルフスクール、顔写真漏えいか 個人情報11万件、銀行口座も
- ステップゴルフ 不正アクセスで顔写真や口座情報など漏えい 最大で23万件漏えいか
- ゴルフスクール「ステップゴルフ」で不正アクセス 顔写真など漏洩か [情報漏洩・個人情報流出の最新ニュース]
- ステップゴルフで不正アクセス、会員ら約11万4,000件の個人情報が漏えいした可能性が高い
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.