Breach · 3 min read
teket: all members’ names and emails confirmed taken; ticket service paused
NTT Docomo-linked e-ticket service teket says unauthorized access took every member’s name and email. Buyers’ addresses and ticket codes may be in the set too.
teket, the Japanese electronic-ticket service linked to NTT Docomo, says unauthorized access took personal details from its systems and that the service has been paused since the evening of November 5, 2026. The company posted a first notice on November 8. Coverage of that notice continued on November 9. It has confirmed that every member’s name and email address left. For people who registered or bought, more fields may be in the set. Exact counts are still being checked.
What happened
According to teket’s corporate notice (in Japanese) and same-day reporting by Impress Watch, staff judged on November 5 that outside access to servers was likely, stopped the service at about 8:30 p.m., and cut off the path. Investigation on November 6 confirmed unauthorized access to the systems that hold member information and that stored data had left. The firm reported to Japan’s Personal Information Protection Commission the same day. Restart timing is not set. The company says it has not confirmed secondary misuse or further access so far.
What may have been exposed
As of the first notice and press summaries of it:
- All members: name and email address (confirmed taken).
- Members who registered or bought: date of birth, age, gender, postal address, phone number, ticket issue codes, and serial codes issued by event organizers may also be included.
- Counts for the wider fields are still under review.
While the service is down, purchased QR tickets cannot be shown in the app. For events during the outage, teket asks buyers to show the purchase-confirmation email at the door, or give their name if the email is missing, and to follow any extra instructions from the organizer. Organizer admin login and QR door check are also paused; organizers are asked to use purchase emails and lists teket provides. Settlements are planned on the usual schedule, the company says.
What this means for you
If you hold a teket account, assume your name and email are in the set. Buyers should also treat address, phone and ticket codes as possibly taken. That mix is enough for fake “ticket reissue,” refund or event messages. teket warns that lookalike emails, SMS and calls may follow.
What you can do
- Watch teket’s corporate news page for a fuller count and individual guidance once the firm finishes matching.
- For events you already bought, keep the purchase-confirmation email handy and follow organizer instructions at the door.
- Treat unexpected teket, Docomo or event messages as suspect. The company says it will not ask for a password or card number by email, SMS or phone.
- See how scammers use leaked data to make phishing personal if a message already seems to know your ticket details.
How Frame helps
Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Frame can also look up your verified emails in Have I Been Pwned’s breach database. Frame’s email aliases also let you give each ticket shop its own address, so a fake event message that arrives at the wrong one stands out. Frame never collects or stores the leaked records themselves.
Related coverage
- Orderect: reservation details leaked after unauthorized access on November 6 and 8: another consumer booking-platform disclosure this week.
- How scammers use leaked data to make phishing personal.
Sources
- teket, Apology and notice: information leak after unauthorized access (first report) (in Japanese), November 8, 2026
- Impress Watch, Docomo-linked e-ticket teket reports a data leak; service fully stopped (in Japanese), November 9, 2026
More stories
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.