← Sansan

2026 Sansan User Forum — Commune breach; 1,325 emails confirmed (+8,687 possible)

2026 10.0K records affected Share on X

Data compromised

Per Sansan 9 Oct notice: 1,325 confirmed — email, display name, self-intro, profile image, group membership. 8,687 possible without email — display name, intro, image, groups. Passwords not included. Sansan / Bill One / Contract One / Eight core products unaffected.

Technical writeup

Verified Sansan notice (9 Oct 2026). External Commune cloud for Sansan User Forum hit in platform-wide unauthorized access. 1,325 members with email confirmed leaked; 8,687 additional may have non-email profile fields exposed. Passwords not in leak set. PPC reported; all forum members emailed 9 Oct; community paused. Related: commune2026. companyConfirmed true; recordsAffected 10012 (1325+8687).

Root cause

Commune cloud hosting Sansan User Forum compromised (invite-link / admin-impersonation platform incident); Sansan notified by Commune 6 Oct 2026

References