white-essence-2026 · Disclosed 2026-08-12
ホワイトエッセンス: unauthorized access and impact
A reservation-site vulnerability enabled unauthorized access to the core system. Leakage affects about 1.05 million accounts, including clinic personnel and employees.
Outcome: Confirmed breach
Entry path and evidence
Timeline
Disclosure date established by the reviewed notice. [s1]
Reported response
- Reported fact
The flaw was addressed, traffic blocking introduced and authentication and permissions reviewed.
[s1]画像本文 §§1-3,6（ブラウザで目視）
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
The notice does not establish all entry, timing and extraction details; unresolved claims remain unknown.
Sources
[s1] ホワイトエッセンス · Primary source
ホワイトエッセンス：事故に関する公表資料 ↗Reviewed 2026-10-09