About the possibility of personal information leakage due to unauthorized access at Studio Co., Ltd.
Published: October 22, 2026
It has recently come to light that Studio Co., Ltd., a company used by the Digital Agency (including the Preparatory Office for Digital Reform-related Bills) to operate its website, may have been illegally accessed by a third party and may have leaked private information to the outside.
1 Overview
On October 16, 2026, Studio K. K. confirmed that a third party had illegally accessed its cloud environment and enabled data in the environment to be acquired from external sources. Please refer to the following announcement by Studio K. K.
2. Personal information that may have been leaked
The scope of personal information that may have been leaked is currently being scrutinized. At present, the following personal information may have been leaked.
(1) Information entered in the following inquiry form on the Digital Agency website (for the period from May 2021 to March 2023)
① General comments and requests
- Number of messages: Up to 8,833 messages
- Items: Name, e-mail address, inquiry content
- *Names and e-mail addresses must be provided on an optional basis.
② Inquiry about employment
- Number of messages: Up to 250 messages
- Items: Name, e-mail address, phone number, inquiry content
- *Your name, e-mail address, etc. must be provided on a voluntary basis.
(c) Inquiries about the vaccination certificate app
- Number of messages: Up to 3,661 messages
- Items: Name, e-mail address, inquiry content
- *Your name, e-mail address, etc. must be provided on a voluntary basis.
④ Inquiry about Myna-chan costume rental
- Number of messages: Up to 117 messages
- Items: Name, e-mail address, affiliation, delivery address, phone number, etc.
- *Your name, e-mail address, etc. must be provided on a voluntary basis.
(e) Workshops and other participation-related activities
- Number of messages: Up to 462 messages
- Category: Name, e-mail address, affiliation, telephone number, etc.
(2) Studio account information
- Number of cases: 35
- Item: Name and e-mail address of Digital Agency staff or person engaged in consigned work in Digital Agency
3. Requests to Eligible Persons
At this time, we have not confirmed any secondary damage, such as the misuse of leaked personal data. However, please be careful of suspicious e-mails, phone calls, and SMSs pretending to be from Digital Agency or related organizations. Please do not open links or attachments included in communications you are not aware of, and do not enter credentials such as passwords or personal details such as credit card information. We will never ask Digital Agency for credentials such as passwords or personal details such as credit card information by e-mail or phone.
4. Inquiries
In charge of Unified Website for Ministries and Agencies Group of Service for Citizens Digital Agency
- Email: unified-web + contact _ atmark _ digital. go. jp
- *To prevent spam mail, "@" is displayed as "
_ atmark _". When you send mail, please replace "_ atmark _" with "@" (one byte).
- *To prevent spam mail, "@" is displayed as "