Sharefull Breach May Expose Data of Up to 7.5 Million Accounts
Japanese gig-work app Sharefull says unauthorized access to an internal system may have leaked personal data on up to 7.5 million accounts, including bank details.
SUMO· the number puzzle
Dialo· learn languages by speaking
ediviewer· read EDI files like documents
giftdetect· the right gift in minutesSharefull, the Tokyo-based operator of the short-shift job app of the same name, announced on November 9 that unauthorized access to its internal management system may have exposed personal data tied to as many as 7.5 million user accounts. Information on up to about 7,500 corporate clients may also have leaked.
What was exposed
The user data that may have been taken includes names, phone numbers, email addresses, home addresses, dates of birth, bank account details used for salary payments, storage URLs for face photos, emergency contacts and information related to residence status. PINs and passwords for bank accounts are not included.
For companies that post job listings on the platform, the affected data covers company names, addresses, phone numbers, contact persons' names and email addresses, and part of the sales management data.
Sharefull says wages, point usage, contracts, work records and images of identity documents were not affected. It also says it holds neither My Number data nor credit card information.
Timeline and response
The intrusion occurred around 11:30 p.m. on November 4. The company detected it at about 9:45 a.m. on November 5 and blocked external access by 2 p.m. that day. A subsequent investigation identified the scope of the impact, and the company says it confirmed that no route for further leakage remains.
Sharefull has notified the police and is going through reporting procedures with Japan's Personal Information Protection Commission. It plans to work with an outside specialist firm to determine the cause and will contact affected people in stages, mainly by email.
The company is urging users to stay alert for suspicious emails and text messages, since leaked contact details are often used for phishing and other secondary attacks. The service continues to operate normally, and the company says it has found no unauthorized access to its related shift-management service, Sharefull Shift.
Apps worth a look
SUMO: the number puzzleTap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.
Dialo: learn languages by speakingTalk to an AI conversation partner; every sentence comes back corrected and explained in your language. 9 languages, A1 to C2.
ediviewer: read EDI files like documentsOpen EDIFACT and X12 messages, see every segment explained, convert to JSON/XML, export PDF and Excel. Runs locally, no upload.
giftdetect: the right gift in minutesPick who it is for, the occasion and their personality. The search engine reads product descriptions from local shops and ranks what fits. Free, no sign-up.
More from this day
See all →
Nvidia Study: Summarizing Context Keeps AI Agent Performance
Korea's Financial Security Institute Hit by Hack, Data Leaked
AI Reverse Engineering Boom: REA Tool Mods Smart TVs and Apps
