2026-11-13
Unauthorized access to the Japan Chamber of Commerce and Industry's online exam management system (up to about 980,000 people): names, birth dates, pass/fail results and scores may have leaked — what test-takers should do
On November 10, 2026, the Japan Chamber of Commerce and Industry (JCCI) announced that unauthorized access to the external server it uses for its online exams (the exam management system) may have leaked test-taker information. A malicious file was placed on November 1; JCCI confirmed it on November 4 through a report from the system management company, deleted it and applied a vulnerability fix (patch) the same day. On November 9 the scale was found to be up to about 980,000 people (about 1.97 million records), and JCCI reported it to the Personal Information Protection Commission. The scope is people who took any of eight online exams, including bookkeeping and Retail Marketing, from April 1, 2022 to November 4, 2026. Name, name in kana, sex, date of birth, pass/fail result and score, plus the optional email address, phone number and address, may have leaked. Payment information is not included, and no leak or misuse has been confirmed. As of November 13, 2026 we found no follow-up. Our conclusion: be ready for fake emails, texts, calls and mail in the name of the Chamber of Commerce, and do not trust a sender just because they know your result or score.