Ryohin Keikaku (TYO: 7453), which runs the Muji retail brand, said on November 4 that roughly 1.09mn customer records, some of them containing credit card numbers, may have been exposed after an intruder gained access to its system, Kyodo News reported on November 5.
The disclosure adds to a string of data breaches at Japanese companies, many of them traced to a single contractor, email distribution firm Arara Inc. Electronics chain Bic Camera, two regional airlines and a workwear maker have all reported leaks linked to Arara. A Nomura Holdings subsidiary disclosed a separate breach on the same day.
Of the Muji Card records that may have leaked, about 345,000 include dates of birth and the complete numbers of credit cards that are still valid, the company said. Late in October, Ryohin Keikaku reported a separate incident involving its Muji App, in which as many as 27.26mn customer records may have been compromised.
Bic Camera said around 14.9mn customer records, email addresses among them, may have leaked after unauthorised access to the system Arara operated to send the retailer's email newsletters. Credit card details and log-in credentials for online shopping were not involved, it said.
Regional carrier Airdo, based in Sapporo on the northern island of Hokkaido, said on November 4 that 673,920 email user records had been leaked. Solaseed Air, headquartered in Miyazaki on the southwestern island of Kyushu, put its figure at up to 490,000 email addresses. Both airlines said no names or credit card information had been compromised.
Workman Co, also an Arara client, said as many as 1.45mn email addresses may have leaked.
Separately, Nomura Investor Relations Co said its Institutional Navi service had been breached. The platform gives institutional investors and analysts information on corporate earnings briefings and helps them manage attendance. The intrusion was detected on November 2, and the breach was confirmed a day later.
The company did not say how many records were affected but said names and email addresses may have been exposed. It has halted the service and is assessing the extent of the damage.
As a precaution, it has also suspended an information service for individual investors that runs on the same server while it checks whether that system was accessed.
No comments:
Post a Comment