Entouch Confirms Data Leak After Unauthorized Access to Remote Detailing Database
Summary
Toho Holdings said attackers accessed an Entouch database used for remote detailing and leaked information including healthcare workers’ names, contact details, and appointment data. The number affected is still under investigation.
Key points
- Toho Holdings reported unauthorized access to its subsidiary Entouch’s remote detailing database, discovered around October 13, 2026.
- The company attributed the access to a third party involved in ransomware attacks; no actor was named.
- Potentially exposed data includes healthcare workers’ names, affiliations and contact details, platform-user information, pharmaceutical companies and products, and appointment details.
- The number of affected people and the full scope remain under investigation.
- The company said the database did not contain the underlying content files or recorded audio and video, and it had not confirmed data alteration, deletion, or disruption to business operations.
- Entouch applied security patches, preserved access logs, forced password changes, consulted police, and reported the incident to Japan’s Personal Information Protection Commission.
- An external forensic investigation is examining the cause, scope, and measures to prevent recurrence.
Article Details
- Victim Organization
- Entouch Co., Ltd.
- Incident Type
- Unauthorized access to a database supporting the remote detailing business, resulting in external disclosure of information. Toho Holdings attributed the access to a third party conducting ransomware attacks.
- Disclosure Date
- 2026-10-19
- Data Types Exposed
- Healthcare workers' names, affiliated medical institutions, and prefectures
- Platform users' names and email addresses
- Appointment contact details, including telephone numbers and email addresses
- Product and pharmaceutical company names associated with appointments
- Appointment creation dates, meeting dates, and meeting status
- Affected Records
- Under investigation as of 2026-10-19.
- Operational Impact
- Toho Holdings stated that other group systems were unaffected and Entouch's business continuity was not disrupted. Data alteration or deletion was not confirmed. Content files and recorded video or audio were outside the affected database and not included in the reported leak.
- Ransom Or Extortion
- The company did not specifically disclose whether data was encrypted or a ransom was demanded.
- Claim Status
- confirmed