Japan Chamber of Commerce Exam Breach May Expose 980,000 Test-Takers

Who is affected and what was exposed

The breach covers people who sat computer-based exams between April 1, 2022 and November 4, 2026. The exams include bookkeeping, Retail Marketing (Hanbaishi), Nissho PC, Electronic Accounting Practice, Key Touch 2000, Business Keyboard, Nissho Programming and Nissho Business English.

The data that may have leaked includes names, furigana readings, gender, date of birth, pass/fail results and exam scores. Email addresses, phone numbers and postal addresses may also be affected, but only where candidates entered them voluntarily. The organization says payment data such as credit card information is not involved.

Timeline

The system management company reported the intrusion on November 4, which is when it was confirmed. The malicious program had been installed on November 1. The file was deleted immediately and the vulnerability was patched. Further investigation showed on November 9 that data may have been taken.

The case adds to a run of data leaks at Japanese organizations. Because exam records link identity details to results, affected candidates may want to be alert to phishing emails or calls that use the exposed information, particularly if they supplied contact details.

The JCCI has not, in the material available, given details on how the attackers gained access or on any support for those affected beyond the announcement itself.