Teollimi

Yasukuni Shrine data breach

Yasukuni Shrine announced a data breach on Nov 11, 2026 involving up to 14,500 records (duplicates possible), exposing names, email addresses and passwords. It was caused by a cyberattack. No settlement or compensation has been announced.

Was I affected?

People registered on Yasukuni Shrine's online amulet and goods site (about 14,500 records); the shrine is emailing those affected from ec-info@yasukuni.jp.

Yasukuni Shrine breach facts
AnnouncedNov 11, 2026
When it happenedUnauthorized access found October 28, 2026
CountryJapan
Records exposed (may include duplicates)14,500
Data exposedNames, Email addresses and Passwords
StatusConfirmed by the company or a regulator filing

What happened

Yasukuni Shrine in Tokyo said on November 11, 2026 that its online shop for amulets and other items was accessed without authorization, which it learned on October 28 and took the site offline that day. Names, email addresses, hashed account passwords with the data used to generate them, and account registration details of about 14,500 registered users leaked; the count may change. Card numbers were handled by a payment provider and were not found in the leaked data.

What should I do?

  1. Change the password on any other site where you used the same password as the Yasukuni online shop.
  2. Be wary of emails, texts and calls claiming to be from Yasukuni Shrine; it says it will never ask for passwords, card or bank account numbers.
  3. Turn on two-factor authentication for your email account and other important services.

How Korea fines a breach this size

For comparison, Korea's privacy regulator fined Tiffany Korea ₩2.4 billion (about US$1.6M) in February 2026 over a breach of 4,600 people. Korean law fines the security failure itself, not only misuse of the data.

Data breach fines: Korea vs Japan, the US and Australia →

Know someone who uses Yasukuni Shrine? Share this

More data breaches in Japan →

Check the other services you use →

Sources