JNSA suspends security training service after intrusion puts up to 15,128 records at risk
The Japan Network Security Association confirmed unauthorized access to its security knowledge-check service. Up to 15,128 records may have been exposed, including administrator contact details, user IDs and hashed passwords. JNSA suspended the service and is investigating.
- Disclosed
- Nov 6, 2026
- Public disclosure date
- Severity
- Sharted
- No CVE: a breach, not a bug
- Splash zone
- Registered administrators and users of JNSA's Information Security Knowledge Check service.
- JNSA · data breach · security training
- In the wild
- Yes
- JNSA confirmed unauthorized access. It is still investigating possible data leakage.
What happened
The service lets organizations enroll staff in a security knowledge assessment and review their results. JNSA confirmed an intrusion on November 4. Its first report says up to 15,128 records may have been exposed. Possible fields include administrator names, company names and email addresses, organization location, headcount and industry, the number of participating users, and user IDs and hashed passwords. JNSA says organizations can use a participant ID in place of a name for non-administrator users.
JNSA has engaged external specialists. The first report does not establish the intrusion path, hashing method or extent of any data transfer. JNSA plans individual notifications after identifying potentially affected users and said it planned to report to Japan’s Personal Information Protection Commission on November 6.
Crime-scene timeline
Nov 4, 2026
JNSA confirms unauthorized access and suspends the service
The service page dates the suspension to the evening of November 4. External specialists assist the investigation.
Nov 6, 2026
JNSA discloses the incident and its provisional scope
Up to 15,128 records may have been exposed. The association plans to notify users individually once they are identified.
~Oct 30, 2026
Possible start of unauthorized access
JNSA's investigation places the possible start around the evening of October 30.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- JNSA November 6 first incident report (Japanese PDF)PrimaryConfirms unauthorized access and suspension, estimates the potentially affected records and describes fields, investigation and notification plans.
- JNSA Information Security Knowledge Check servicePrimaryDisplays the service suspension notice.