Shogakukan data breach

What happened

Japanese publisher Shogakukan said on November 9, 2026 that outsiders broke into Minna no Kyoiku Gijutsu and Minna no Yoji to Hoiku, its websites for school teachers and childcare workers, and that some data of Shogakukan ID members who had logged in to them may have leaked. A security flaw present from July 17 to August 25, 2026 was exploited in that period, and Shogakukan found the intrusion on October 27. The data includes internal member codes, login tokens (all cancelled on October 29), nickname, gender, age, occupation, prefecture, favorite authors and genres, Shogakukan services used and paid article purchases, plus children's names and birth dates where members had registered them and email addresses used as nicknames. Members' own names, addresses, phone numbers, birth dates, card data and Shogakukan ID passwords were not stored on the sites. Shogakukan has not said how many people are affected.

What should I do?

1. Be wary of emails claiming to come from Shogakukan or the two sites, and don't open links or attachments you weren't expecting.
2. Shogakukan says it will never email you asking for passwords or card numbers; delete any message that does without replying.
3. If you registered your children's names and birth dates, be cautious of messages that seem to know them.
4. All sessions on both sites were logged out; log in again only by going to the official site directly.

Other Shogakukan breaches: Nov 6, 2026

More data breaches in Japan →

Check the other services you use →