PHP Vulnerability Responses by Company

Sansan

Companies / web services
Aliases / services
サンサン / Sansan User Forum / Sansan株式会社 / Sansan
Official website
https://jp.corp-sansan.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Sansan User Forum

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

The October 9, 2026 notice reports: The external Commune incident confirmed exposure of email/profile data for 1,325 members, with possible profile exposure for 8,687. Passwords were excluded; the core Sansan, Bill One, Contract One and Eight systems were unaffected.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check the individual email notice and contact the community office with questions. Consult official notices for reopening information.

Official service URL

Source URLs

  1. 2026-10-09: official service noticehttps://jp.corp-sansan.com/news/2026/1009.htmlService and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryIdentifies Sansan as the operator.
  2. 2026-10-09: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.

Comments