Japan's Fire and Disaster Management Agency Suspends Anzen Joho System After Unauthorized Access Detected by Fujisoft

On November 5, Japan's Fire and Disaster Management Agency announced unauthorized access to its 武力攻撃事態等における安否情報収集・提供システム, also known as the Anzen Joho System. The incident was reported by the system's operations and maintenance contractor, Fujisoft, which detected third-party unauthorized access. No personal information leakage has been confirmed at this stage. The agency has suspended the service and blocked external access while Fujisoft investigates the scope of the compromise. The Fire and Disaster Management Agency has directed Fujisoft to complete a rapid root-cause analysis and implement measures to prevent recurrence. The system supports safety information collection and dissemination during armed attack situations and other emergencies.

ScanNetSecurityNovember 8, 2026Translated from Japanese

Read at source

Japan's Fire and Disaster Management Agency announced on November 5 that unauthorized access had been detected on its 武力攻撃事態等における安否情報収集・提供システム, commonly referred to as the Anzen Joho System.

The report originated from the system's operations and maintenance contractor, Fujisoft, which notified the agency that third-party unauthorized access to the platform had been confirmed. At the time of the announcement, no evidence of personal information leakage had been identified.

The Anzen Joho System is currently offline. External access has been blocked while Fujisoft conducts a full investigation into the scope and impact of the intrusion. The Fire and Disaster Management Agency has instructed Fujisoft to expedite the root-cause analysis and to implement effective measures to prevent any recurrence.

Fujisoft

ShareX Facebook LinkedIn Reddit

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Breaches & Leaks

Breaches & Leaks

Hacker Chimeraz Claims 259 Million Records Stolen from SGS French Vehicle Inspection Operations

French hacker Chimeraz has listed for sale a large dataset allegedly taken from SGS French subsidiaries including Auto Sécurité, Sécuritest and Vérif’Autos. The claimed dump contains 259 million lines covering 22.7 million individuals and mixes vehicle technical data with personal contact information. Advertised volumes include 90.8 million vehicle entries, 74.7 million inspections, 29.2 million service records and 40.9 million distinct license plates. The seller also offers subsets linking names, phone numbers and email addresses to specific vehicles and past services. Data samples contain entries dated between 2016 and 2025. Chimeraz has previously claimed responsibility for breaches affecting French tourism operators and political parties. The authenticity of the SGS claim remains unverified by independent sources.

ZATAZNov 9, 2026Translated from French

Breaches & Leaks

Kensium Faces Unverified Claim of 18TB Data Theft Including Source Code and AWS Backups

An anonymous actor has posted a claim dated November 6, 2026, alleging the theft of more than 18 TB of data from Kensium, a Chicago-based provider of e-commerce integration and IT services. The poster states that nearly 170 GB has already been released, with additional material promised in stages. The claimed contents include source code, recent database backups, and personally identifiable information. References to AWS S3 and EC2 appear in the announcement, yet no proof of initial access, compromised credentials, or misconfigurations has been supplied. Kensium specializes in connecting e-commerce platforms with ERP, WMS, and POS systems, making any confirmed exposure potentially valuable for further attacks. Independent verification of the breach remains absent, leaving the scale and authenticity of the data unconfirmed.

ZATAZNov 8, 2026Translated from French

Breaches & Leaks

Ceres Discloses Data Breach at Point Income and CoinTrade Exposing Customer Records

Japanese company Ceres has confirmed two separate incidents of personal data exposure affecting its Point Income loyalty platform and its subsidiary Mercury's CoinTrade cryptocurrency service. In the first case, unauthorized access to a development environment allowed third parties to view backup customer data including nicknames, email addresses, encrypted passwords, and birth dates for approximately 11,100 users. A smaller set of device identifiers was also exposed. The second incident occurred through a third-party email service provider Arara, whose repica platform leaked 88,289 email addresses belonging to CoinTrade customers. Ceres and Mercury have notified affected users, blocked further access, and suspended email campaigns while investigating the root causes with their vendors.

ScanNetSecurityNov 8, 2026Translated from Japanese