---
title: "Idemitsu car-maintenance reservation intrusion"
description: "Idemitsu suspended its car-maintenance reservation service after confirming unauthorized access and possible customer-information exposure."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-11-11"
canonical_url: "https://www.ally.security/incidents/idemitsu-car-maintenance-reservation-intrusion-2026"
markdown_url: "https://www.ally.security/incidents/idemitsu-car-maintenance-reservation-intrusion-2026.md"
stix_url: "https://www.ally.security/incidents/idemitsu-car-maintenance-reservation-intrusion-2026/stix.json"
---

# Idemitsu car-maintenance reservation intrusion

Idemitsu suspended its car-maintenance reservation service after confirming unauthorized access and possible customer-information exposure.

Last modified Nov 11, 2026 · 1 source

## Summary

- **Environment:** Car-maintenance reservation service, formerly PIT in plus
- **Operational impact:** Online reservations, changes and cancellations suspended
- **Financial impact:** No confirmed incident cost quantified

## What happened

[Idemitsu Kosan](https://www.idemitsu.com/) confirmed unauthorized access to its car-maintenance reservation service on November 9, 2026. Customer information had been externally retrievable. The company suspended the service the next day. [1](#source-1)

## Impact

Actual leakage, affected customers and data scope remained under investigation. Online booking, changes and cancellations were unavailable; customers could contact their stores directly. [1](#source-1)

## Timeline

### November 7, 2026 — Unusual access detected

Investigation began after abnormal access was detected. [1](#source-1)

### November 9, 2026 — Unauthorized access confirmed

Investigators confirmed customer information was externally retrievable. [1](#source-1)

### November 10, 2026 — Service suspended

The [first report](https://www.idemitsu.com/jp/information/2026/261110.pdf) announced the suspension. [1](#source-1)

### November 11, 2026 — Briefing updated

This briefing was last reviewed and updated on November 11, 2026.

## Threat Group & Attack Vector

Idemitsu has not disclosed an entry method. It explicitly separated this intrusion from the customer-information misdisplay reported October 9. [1](#source-1)

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific ATT\&CK technique is mapped from the available evidence.

## Response

Idemitsu planned individual notices once affected customers were identified. Restart depended on confirming safety; no date was announced. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/idemitsu-car-maintenance-reservation-intrusion-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Idemitsu car-maintenance reservation unauthorized access: first report

official · Idemitsu Kosan · Nov 10, 2026

<https://www.idemitsu.com/jp/information/2026/261110.pdf>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Resulted In · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: Idemitsu planned individual notification after identifying affected customers and warned against impersonation calls and messages.
2. **Resulted In · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: Idemitsu suspended the service November 10. Online bookings, changes and cancellations were unavailable; customers could contact their stores directly. Restart awaited safety confirmation.
3. **Resulted In · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: Idemitsu detected unusual access to its car-maintenance reservation service, formerly PIT in plus, on November 7. On November 9 it confirmed unauthorized access and that customer information had been externally retrievable.
4. **Resulted In · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: Reservation service suspended
5. **Disclosed At · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: 2026-11-10
6. **Affected Organization · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: Idemitsu Kosan
7. **Occurred At · 100% confidence · current**  
   Unauthorized access confirmed: 2026-11-09
8. **Resulted In · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: Unusual access detected
9. **Resulted In · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: Unauthorized access confirmed
10. **Resulted In · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: Actual information leakage, affected customers and scope remained under investigation. Idemitsu explicitly distinguished this incident from its October 9 customer-information misdisplay notice.
11. **Occurred At · 100% confidence · current**  
   Reservation service suspended: 2026-11-10
12. **Occurred At · 100% confidence · current**  
   Unusual access detected: 2026-11-07
13. **Discovered At · 100% confidence · current**  
   Idemitsu car-maintenance reservation intrusion: 2026-11-07

</details>