Security Knowledge
← Incident database

epark-peakmanager-2026 · Disclosed 2026-07-31

EPARKリラク＆エステ: unauthorized access and impact

Forensics confirmed database exfiltration followed by deletion; the entry method is withheld. The September 24 update revised about 33 million records to about 22.18 million after matching; an exact person count cannot be determined.

Cause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    Forensics confirmed database exfiltration followed by deletion; the entry method is withheld.

    [s1]第2報 §§1-4
  • Reported fact

    The September 24 update revised about 33 million records to about 22.18 million after matching; an exact person count cannot be determined.

    [s1]第2報 §§1-4

Timeline

  1. Disclosure date established by the reviewed notice. [s1]

Reported response

  • Reported fact

    The deleted database was restored and information-management and security controls are being reviewed.

    [s1]第2報 §§1-4

Evidence relevant to prevention

Insufficient evidence

Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

The revised 22.18 million records replaces the 33 million estimate. Five free-text entries resembling expired card data are not verified payment credentials.

Sources

  1. [s1] EPARKリラク＆エステ · Primary source

    EPARKリラク＆エステ：事故に関する公表資料 ↗

    Reviewed 2026-10-09