kaga-solnet-2026 · Disclosed 2026-07-01
加賀ソルネット: unauthorized access and impact
A system vulnerability was exploited; the product, CVE and prior patch availability are undisclosed. Exfiltration affecting 165,587 people was confirmed, revising the initial maximum of about 170,000. Leaked files contained no passwords; card data was not stored.
Outcome: Confirmed breach
Entry path and evidence
- Reported fact
A system vulnerability was exploited; the product, CVE and prior patch availability are undisclosed.
[s1]8月17日第二報 §§1-5 - Reported fact
Exfiltration affecting 165,587 people was confirmed, revising the initial maximum of about 170,000. Leaked files contained no passwords; card data was not stored.
[s1]8月17日第二報 §§1-5
Timeline
Disclosure date established by the reviewed notice. [s1]
Reported response
- Reported fact
The vulnerable component was fixed; service remains suspended for rebuilding. Pre-launch assessment and access and monitoring improvements are planned.
[s1]8月17日第二報 §§1-5
Evidence relevant to prevention
Insufficient evidence
Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
The product, CVE and prior patch availability are undisclosed. Migration and restart plans are not represented as completed controls.
Sources
[s1] 加賀ソルネット · Primary source
加賀ソルネット：事故に関する公表資料 ↗Reviewed 2026-10-09