At Home says 6,901 rental management records may have been exposed
At Home confirmed an unauthorized login to the administration site for its rental management service on November 9. It says 6,901 records entered by member real estate agencies may have been exposed, including contact and rental contract details.
- Disclosed
- Nov 13, 2026
- Public disclosure date
- Severity
- Sharted
- No CVE: a breach, not a bug
- Splash zone
- Tenants, property owners and business contacts entered by affected member agencies in At Home’s rental management service.
- Data breach · Property management · Japan
- In the wild
- Yes
What happened
At Home says the records may include names, birth dates, phone numbers, addresses and contract data such as building names, unit numbers and contract status. The company has not confirmed any bank-account data leak, and the system does not hold credit card data. At disclosure it had not confirmed publication, misuse or impact on its other services.
The company says it blocked access from the source, is reviewing logs and is working to notify affected parties individually. The entry path and the amount actually taken remain under investigation.
Crime-scene timeline
Nov 9, 2026
An unauthorized party logs into the administration site
At Home later identifies records submitted by some member real estate agencies as potentially exposed.
Nov 12, 2026
At Home reports the incident to authorities
The company reports to Japan’s Personal Information Protection Commission, JIPDEC and JUAS.
Nov 13, 2026
At Home publishes its initial findings
The company gives a provisional count of 6,901 records and says it is identifying and contacting affected agencies and other parties.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- At Home’s November 13 incident noticePrimaryLists the unauthorized login, provisional count, exposed fields, containment and support contact.