2026 Japan Post — international inquiry web; ~600 records viewable
Data compromised
~600 inquiry registrations were in a state third parties could view: sender name/address/phone/email; recipient name/address (phone/email optional); inquiry number; mail type/postage/origin post office. Actual viewing unconfirmed; no misuse found. Spam (~520k per press) sent from the service mailbox; those destinations did not use the 600 records. recordsAffected 600.
Technical writeup
Verified Japan Post notice 16 Oct 2026 (PDF). Viewable-state census, not a proven take. companyConfirmed true; recordsAffected 600.
Root cause
Unauthorized access to the international-mail investigation-request web-intake server (first flagged 25 Sep 2026; follow-up 16 Oct). Service paused. How access became possible not detailed in the census notice.