Privacy Unpacked

Reported breach

Tasuka data breach

JPJapan · 資さん

Security NEXT reported a data breach at Tasuka (Japan) on 5 November 2026.

People affected
Not reportedno count given yet
Reported
5 November 2026News report

What was exposed 8

  • Phone numbers
  • Dates of birth
  • Names
  • Gender
  • Wage history
  • Attendance records
  • Reason for resignation
  • Start date

How it happened

How
Data left open (misconfiguration) There was a possibility that employees' personal information could be viewed from outside due to server configuration defects source
Our translation from Japaneseサーバの設定不備により、外部から従業員の個人情報が閲覧できる可能性があった
Way in
カホエンタープライズ At Kaho Enterprise, to which server management and operations are outsourced, there was a problem with some server settings source
Our translation from Japaneseサーバの管理運用を委託しているカホエンタープライズにおいて、サーバの一部設定で問題があった

Sources 1

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

Questions about the Tasuka breach

Was Tasuka hacked?

Security NEXT reported a data breach at Tasuka (Japan) on 5 November 2026. How it happened, by the sources: misconfiguration, through カホエンタープライズ. It has been reported but not confirmed by Tasuka or an authority.

What data was exposed in the Tasuka breach?

Phone numbers, Dates of birth, Names, Gender, Wage history, Attendance records, Reason for resignation and Start date, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Tasuka data breach settlement?

No settlement open for claims is on record for Tasuka as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the Tasuka breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Tasuka’s own site, or check the letter here.

More breaches in Japan

  1. Yamada DenkireportedJPJapan · 14 November 2026 Phone numbersNamesAddresses+2 3.5Mcustomers
  2. Kochi CityreportedJPJapan · 14 November 2026 Personal information 1.5Kpeople
  3. Monex SecuritiesreportedJPJapan · 13 November 2026 Driver’s license numbersEmail addresses 1.1Memail addresses
  4. City of OsakareportedJPJapan · 13 November 2026 Email addresses 1Memail addresses
  5. Cybersecurity CloudreportedJPJapan · 13 November 2026 Email addressesNamesOrganization names+1 –not reported

Every breach in Japan →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.