Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
-
Attackers behind a string of personal data leaks at Japanese organizations have been abusing APIs used by mobile apps and targeting known software flaws, according to an alert from the JPCERT Coordination Center (JPCERT/CC). The Tokyo-based center, which collects incident reports, based its October 8, 2026 advisory on those reports along with other information. Notably, the alert does not name any specific attacker or affected organization.
The abuse of mobile app APIs appears to be a key vector, allowing attackers to access data through interfaces that are often less scrutinized than traditional web endpoints. Alongside this, the targeting of known software flaws suggests organizations are failing to patch promptly. One product explicitly mentioned in the reporting is Metabase, which has been subject to attacks. The article does not provide a specific CVE ID, affected version list, or indicators of compromise, so none are included here.
Given the lack of named victims or technical identifiers, defenders should treat this as a sector-wide warning. Key takeaways from the alert include:
- Mobile app APIs are being actively abused to exfiltrate personal data.
- Known, unpatched software vulnerabilities are a primary entry point.
- Metabase instances have been targeted in these campaigns.
- JPCERT/CC issued the alert on October 8, 2026, based on incident reports from Japanese organizations.
Organizations should review API access controls for mobile applications, ensure timely patching of known vulnerabilities, and pay particular attention to any internet-facing Metabase deployments. Since no CVE or version details were provided, teams should refer to vendor advisories for their specific software versions.
Source: The Hacker News
Has your organization audited its mobile API endpoints or Metabase exposure recently?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login