LEAN BODY Inc.
- Aliases / services
- LEAN BODY Inc. / 株式会社LEAN BODY / LEAN BODY株式会社
- Official website
- https://lean-body.co.jp/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
LEAN BODY online fitness
- Response status
- Not listed
- Response information checked
- 2026-10-30
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30
Published September 15, 2026 and updated October 27, the notice confirms intrusion through Metabase from August 11 and extraction on August 31 and September 7/9. About 440,000 accounts, including former users, were affected—not distinct people. Data included emails, fitness inputs, encrypted passwords, card last-four digits and some corporate users’ names. Full card numbers/security codes were excluded. Metabase use ended October 13.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
Change the password through official settings and replace reused passwords elsewhere. The service says normal use remains available. Verify suspicious email/SMS through official support without replying or entering data.
Official service URL
Source URLs
- 2026-09-15 Official LEAN BODY online fitness noticehttps://lean-body.co.jp/news/JlBWMCs7Service and operation documentation
Related official sources
- 2026-09-15 Official LEAN BODY online fitness noticeOfficial notice; link to this PHP incident unconfirmedConfirms scope, chronology and user guidance.
Comments