Unauthorized access was confirmed on some servers supporting YMIRLINK,Inc.’s email delivery service, and information including email addresses may have been exported in approximately 9 million records.
YMIRLINK,Inc. announced on 19 October 2026 that some servers supporting its email delivery service had been accessed without authorization and that data had been taken outside the company. The company estimates that the exported data comprises approximately 9 million records in total, including email addresses, and is investigating the number of affected individuals and the details of the data.
It was found that service credentials of support and quality-control personnel had been obtained by exploiting a vulnerability and that an unauthorized program had been installed. Records were also found showing attempts to authenticate to other systems using the credentials obtained.
The servers on which unauthorized access was confirmed were isolated and vulnerability patches applied. The personnel’s credentials were deleted from other systems, and the company notified law-enforcement authorities. It said that it would continue its detailed investigation in cooperation with external experts and disclose any additional facts as they emerge.
The company is also examining the impact on its results for the fiscal year ending December 2026. It plans to make a further announcement if new facts emerge.