Muji Operator Says Retained Card Data May Have Been Leaked
The company said it is investigating whether retained card data and credential-stuffing attacks contributed to the breach.
- Ryohin Keikaku announced that unauthorized access detected Oct 29 may have exposed up to 27.26 million customer records of the Muji retail brand, including email addresses and user information.
- The company retained full card numbers from Muji Card records previously used for customer identification until July 2021, a failure to delete unnecessary information that enabled the security breach.
- Additional investigations reveal about 1.09 million credit card records may have been leaked; around 270,000 member accounts were targeted by credential stuffing attacks, and data on about 440,000 cash-on-delivery customers was also compromised.
- Ryohin Keikaku President Satoshi Shimizu apologized at a Tokyo press conference, pledging to cover reissuance fees for affected credit cards while the company suspended services to strengthen security.
- While admitting "shortcomings in our data management," the company continues investigating whether data retention was intentional, as management expressed a "deep sense of responsibility" regarding the breach.
11 Articles
11 Articles
Muji operator apologizes for data breach
The operator of the Muji chain of retail stores is one of the latest Japanese companies hit by cyberattacks. Its president has apologized for breaches of customer data, including more than a million credit card numbers. The compromised data include that of former members.
Ryohin Keikaku, the operator of the Japanese lifestyle goods and general merchandise brand Muji, announced on the 12th that there is a possibility that 1.09 million customer credit card records have been leaked. According to Kyodo News and other sources, Ryohin Keikaku President Satoshi Shimizu held a press conference in Tokyo on the same day and apologized, stating, "We were unable to prevent the cyber attack due to vulnerabilities in parts of …
(Seoul=Yonhap News) Reporter Kim Byeong-gyu = Yangpu Plan, which operates the popular Japanese household goods general store brand “MUJI”, received 1.09 million customer credit card information on the 12th...
databreaches.net
IT Security News - cybersecurity, infosecurity newsJPN: Muji operator apologizes for data breach
NHK World reports: The operator of the Muji chain of retail stores is one of the latest Japanese companies hit by cyberattacks. Its president has apologized for breaches of customer data, including more than a million credit card numbers. The compromised data include that of former members. Ryohin Keikaku President Shimizu Satoshi said at a...
Coverage Details
Bias Distribution
- 60% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
