Science & Tech · Cybersecurity · 17 hrs ago
Sukesan Udon says employee data may have been exposed
Sukesan Udon, a Japanese noodle chain owned by Skylark Holdings, disclosed a possible data exposure on October 27.
The information concerns about 20,000 current and former workers who were employed between October 2021 and October 2026.
A contractor’s server settings may have left personal and work records accessible online, including names, birth dates, phone numbers, pay history and attendance records.
Some workers’ records may also have included their reason for leaving and social insurance history.
The company says the data required authentication to view and it has found no evidence of information being taken or changed, but it could not fully check whether the data store was accessed.
No misuse or harm to individuals has been confirmed so far.
The company is continuing its investigation and says it will strengthen checks on outside contractors’ security and data management.
Sukesan Udon said personal information belonging to employees and former employees may have been accessible from outside through a database managed by its contractor, Kaho Enterprise.
The company said a settings flaw caused the exposure, and it has not confirmed information was misused or caused secondary harm.
About 20,000 people may be affected, including workers employed between October 2021 and October 2026.
The data may include names, birth dates, phone numbers, pay history, attendance records and reasons for leaving.
Sukesan said it could not rule out access to the data and is continuing its investigation.
- Who
- Sukesan Udon and its employees and former employees. About 20,000 people may be affected.
- What
- Personal information may have been accessible from outside because of a settings flaw on a contractor-managed server.
- When
- Sukesan announced the issue on October 27, 2026. The potentially affected employment period is October 2021 to October 2026.
- Where
- In a database managed by Kaho Enterprise, Sukesan’s server management and operations contractor.
- Why
- A settings flaw left the database accessible over the internet. The company said access to the data itself required authentication.
This story does not have two clearly opposing sides.
Sukesan announced that a settings flaw at its server contractor may have made employee and former employee data accessible from outside.
Ryutsu News reported the potentially affected data and said no misuse or secondary harm had been confirmed.
Sukesan’s public relations representative said the data area required authentication and that the company had not confirmed external leakage, while its investigation continued.
- Potentially affected people
- About 20,000 employees and former employees
- Employment period
- October 2021–October 2026
- Contractor
- Kaho Enterprise, based in Fukuoka
- Potential data
- Names, birth dates, phone numbers, pay history, attendance records and reasons for leaving
- Announcement
- October 27, 2026
3 sources
What people are saying
We could not comprehensively confirm whether the target data storage area had been accessed, and could not rule out the possibility that personal information had been leaked.
The target data storage area was separately protected, so a third party was not able to view or obtain the personal information inside freely and without conditions.
We take this situation seriously and will thoroughly check security settings at external contractors and strengthen the management and supervision of data.