Bushiroad announced that personal data belonging to approximately 13,000 CBT applicants and customer support users of BanG Dream! Our Notes was compromised following unauthorized access to a contractor's system. The compromised information included email addresses, IP addresses, names, telephone numbers, addresses and player IDs. No password or credit card information has been confirmed as compromised.
Bushiroad announced that a third party had gained unauthorized access to the system of an external company contracted to develop the smartphone app BanG Dream! Our Notes. The affected information relates to CBT applicants and customer support users.
The compromised data falls broadly into 2 groups. The first is CBT-related information, consisting of data collected from 25 to 29 June 2026 and including information on 10,194 applicants. The second is information on 3,034 people who contacted customer support between 24 September and 14 October 2026.
The compromised information included email addresses, IP addresses, device information, names, telephone numbers, addresses, postal codes and player IDs. No leakage of passwords or credit card information has been confirmed at this time. No secondary damage has been confirmed, and the company said that deficiencies in the contractor's management have been remedied.
Bushiroad plans to contact affected users individually in sequence and has also warned them to be cautious of suspicious emails and SMS messages.