Japan Chamber of Commerce and Industry (JCCI) data breach
Was I affected?
Japan Chamber of Commerce and Industry (JCCI) confirmed a breach affecting about 980,000 people, exposing names, dates of birth, email addresses and phone numbers. You may be affected if you took one of JCCI's online (CBT) exams, such as bookkeeping, retail marketing, Nissho PC, electronic accounting, Key Touch 2000, business keyboard, Nissho programming or Nissho business English, between April 1, 2022 and November 4, 2026.
| Announced | Nov 10, 2026 |
|---|---|
| When it happened | Malicious file planted November 1, 2026; unauthorized access confirmed November 4, 2026 |
| Country | Japan |
| People affected | 980,000 |
| Data exposed | Names, Dates of birth, Email addresses, Phone numbers, Addresses and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
The Japan Chamber of Commerce and Industry, which runs Japan's widely taken bookkeeping (boki) exams, said on November 10, 2026 that information on up to about 980,000 test takers (about 1.97 million records) may have leaked after unauthorized access to an external server used to manage its online exams. The system management company reported the intrusion on November 4; a malicious file had been placed on the system on November 1, and it was deleted and the vulnerability patched the same day. The data covers people who took eight online exams, including bookkeeping, retail marketing (hanbaishi), Nissho PC and business English, between April 1, 2022 and November 4, 2026: name and phonetic reading, gender, date of birth, pass/fail results and scores, plus email address, phone number and address where test takers entered them. Payment card data is not included, and JCCI says it has not confirmed any actual leak or misuse so far; it reported the incident to Japan's Personal Information Protection Commission on November 9.
What should I do?
- Be wary of emails, texts, calls or letters that claim to be from the Japan Chamber of Commerce and Industry, a local chamber or an exam center, especially ones that mention your exam results or scores.
- Don't click links or open attachments in unexpected messages, and never type passwords or card details into a site reached from one; JCCI says it will not ask for passwords or card information by email, text or phone.
- Expect targeted scams such as fake job, course or certification offers that use your name, birthday and exam history to look genuine.
- If you have questions, call JCCI's business department at 03-6402-6154 (weekdays 9:30 a.m. to 8 p.m.) using the number on its official website.
How Korea fines a breach this size
For comparison, Korea's privacy regulator fined Dior Korea ₩12.2 billion (about US$8M) in February 2026 over a breach of 1.95 million people. Korean law fines the security failure itself, not only misuse of the data.
Know someone who uses Japan Chamber of Commerce and Industry (JCCI)? Share this
Check the other services you use →
Sources
- 商工会議所ネット試験管理システムへの不正アクセスによる受験者情報(個人情報)漏えいの可能性について (Possible leak of test taker data after unauthorized access to the online exam management system) · Japan Chamber of Commerce and Industry (in Japanese) · official
- 日商、簿記受検者など98万人情報漏洩の可能性 不正アクセスで · Nikkei (in Japanese) · news
- 日本商工会議所、ネット検定98万人の情報漏えいか 合否、得点も · Jiji Press (in Japanese) · news