Security Knowledge
← Incident database

rakuten-books-pc-2026 · Disclosed 2026-08-21

楽天ブックスネットワーク: unauthorized access and impact

Unauthorized access to some internal PCs was detected on April 5; the entry route is undisclosed. Affected PCs held 33,333 delivery, 2,101 contact and 339 employee records; leakage was not confirmed.

Endpoint / session

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    Unauthorized access to some internal PCs was detected on April 5; the entry route is undisclosed.

    [s1]§§1-3
  • Reported fact

    Affected PCs held 33,333 delivery, 2,101 contact and 339 employee records; leakage was not confirmed.

    [s1]§§1-3

Timeline

  1. Disclosure date established by the reviewed notice. [s1]

Reported response

  • Reported fact

    The PCs were isolated and external investigation and notifications performed.

    [s1]§§1-3

Evidence relevant to prevention

Insufficient evidence

Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

The initial entry route and actual exfiltration are not established. Stored record categories are not necessarily distinct people.

Sources

  1. [s1] 楽天ブックスネットワーク · Primary source

    楽天ブックスネットワーク：事故に関する公表資料 ↗

    Reviewed 2026-10-09