Data of 10.9 lakh customers leaked due to unauthorised access to Muji's system

Ryohin Keikaku Company, the operator of the Japanese brand Muji, stated on Wednesday that approximately 10.9 lakh customer records may have been leaked due to unauthorised access to their system. This leaked data includes credit card numbers. According to the company, approximately 3,45,000 potentially leaked records of Muji Card include full numbers of currently valid credit cards and dates of birth.

According to a report by the Bangkok Post, the company had reported another major incident at the end of last month. At that time, it emerged that up to 27.26 million customer records might have been leaked due to unauthorised access to the Muji app.

This series of data leak incidents continues. Nomura Investor Relations Company, a subsidiary of Nomura Holdings Inc., stated that there was unauthorised access to its system that provides information to institutional investors and analysts, resulting in a data leak. The company has not disclosed the exact number of affected records but stated that personal information such as names and email addresses may have been leaked. The company has currently suspended this service and is investigating the impact. The affected service is 'Institutional Navi', which provides corporate earnings briefing information. The unauthorised access was discovered on Monday, and the data leak was confirmed on Tuesday. As a precautionary measure, the company has also suspended the information service for individual investors using the same server.

On the other hand, electronics retailer Bic Camera Inc. also stated that they may be affected by this data leak. Due to unauthorised access to the system of a contractor handling their email newsletter distribution, approximately 14.9 million customer records, including email addresses, may have been leaked. Bic Camera clarified that this email distribution system was operated by Arara Inc. and does not contain any credit card information or online shopping login details. This data may include information of customers of Bic Camera and its subsidiaries, Kojima Company and Sofmap Company. The company is investigating, but no secondary damage has been confirmed so far.

Japanese regional airlines Airdo and Solaseed Air have also been affected by the system of Arara Inc. Airdo stated that 6,73,920 email user records were leaked, while Solaseed Air stated that approximately 4,90,000 email addresses may have been leaked. Both airlines said that credit card information and names are secure. Workwear manufacturer Workman Company also stated that as a customer of Arara's service, approximately 1.45 million of their email addresses may have been leaked.

Ryohin Keikaku Company is the company that manages the Muji brand.