Furusato Choice (Trustbank): 4,454,097 donor records leaked after unauthorized access
Furusato Choice (Trustbank, CHANGE Holdings)
Trustbank, operator of Japan's Furusato Choice hometown-tax donation site, says unauthorized access on Oct 17 2026 leaked 4,454,097 member records: names, email and postal addresses, phone numbers, hashed passwords and estimated donation-deduction amounts. Services were suspended on Oct 19. A later update found five donors had more data exposed, including saved-card display details (last four digits, name, expiry) for two of them.
Why this severity: 4.45M records including hashed passwords and addresses
- Started
- Oct 17, 2026
Affected
- 4,454,097 Furusato Choice member records
Fixed in
No fixed release yet
Timeline4
Update: five donors had extra data exposed, including saved-card display details for two; the total count is unchanged.
Trustbank and parent CHANGE Holdings disclose 4,454,097 leaked member records.
Trustbank suspends Furusato Choice services pending safety checks.
Unauthorized access to Furusato Choice systems.
Advisories2
News & write-ups2
Get an email when a new major security incident drops. No spam, unsubscribe any time.
