Security Knowledge
← Incident database

asahi-pharma-digital-2026 · Disclosed 2026-10-06

Pharma DIGITAL: unauthorized access to an outsourced member database

Operator Iyaku Joho Net reported unauthorized database access. Medical-professional and employee data may have been viewed or taken; investigation continues.

Supply chain / CICause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    The operator confirmed member-database access and reported it on October 2.

    [s1]1. 概要
  • Reported fact

    Potential maximum scope is about 514,000 medical professionals and 700 employees; about 44,000 of the former also have email data affected.

    [s1]2. 漏えいした可能性がある情報

Timeline

  1. The operator notified Asahi. [s1]

  2. Potential scope and response disclosed. [s1]

Reported response

  • Reported fact

    The site was stopped, the access path corrected, and external specialists engaged.

    [s1]1. 概要 / 3. 現時点での状況と対応

Evidence relevant to prevention

Insufficient evidence

Inspect vendor permissions, access logs, and member-data scope and retention.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

Entry details and confirmed exfiltration scope are undisclosed. Do not add 44,000 to 514,000.

Sources

  1. [s1] 旭化成セラピューティクス · Primary source

    Pharma DIGITALへの不正アクセスおよび個人情報漏えいの可能性について ↗

    Published 2026-10-06 · Reviewed 2026-10-09