epark-peakmanager-2026 · Disclosed 2026-07-31
EPARKリラク＆エステ: unauthorized access and impact
Forensics confirmed database exfiltration followed by deletion; the entry method is withheld. The September 24 update revised about 33 million records to about 22.18 million after matching; an exact person count cannot be determined.
Outcome: Confirmed breach
Entry path and evidence
Timeline
Disclosure date established by the reviewed notice. [s1]
Reported response
- Reported fact
The deleted database was restored and information-management and security controls are being reviewed.
[s1]第2報 §§1-4
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
The revised 22.18 million records replaces the 33 million estimate. Five free-text entries resembling expired card data are not verified payment credentials.
Sources
[s1] EPARKリラク＆エステ · Primary source
EPARKリラク＆エステ：事故に関する公表資料 ↗Reviewed 2026-10-09