2026-11-11
Unauthorized access to Sharefull's internal management system (up to about 7.5 million accounts): names, bank details, emergency contacts and more may have leaked — what workers should do
On November 9, 2026, Sharefull announced that a third party had gained unauthorized access to its internal management system and that users' personal information may have leaked. The access occurred around 23:30 on November 4, was detected around 09:45 on November 5, and the route was blocked the same day. Up to about 7.5 million individual accounts may be affected. The information that may have leaked is: name and name in kana, phone number, email address, address, date of birth, bank account information for salary payments (PINs and passwords are not included), the URL of the face photo, emergency contact (relationship to the user and phone number), residence-status-related information, and account attributes such as registration date, number of jobs worked and preferences. Pay and points, contract and work data, and images of ID documents are not affected, and the company says it holds neither My Number nor credit card information. A separate notice the same day covers contact details of employer companies (up to about 7,500 companies). As of November 11, 2026, no follow-up notice had been found. This site's conclusion: because bank details, emergency contacts and residence status may be included, be ready for contacts that use Sharefull's or an agency's name, calls pretending to be a family member's emergency, payments made to look like mistaken transfers, and demands for money citing your residence status.