5CriticalConfirmedAnnounced
A third party accessed the online ordering payment API and obtained customer data: IDs, emails, phone numbers and transaction records. Card data was not included. Press reports cite up to about 4.48 million records.
This incident was imported from a dataset that compiles public announcements, and we are still checking it against the sources. Counts and causes will be updated after the check. Sources are in Japanese.
| Data | Status | Count | Group | Evidence |
|---|---|---|---|---|
| Email address | Leak confirmed | up to 4,480,000 records | — | Source(opens in a new tab) |
| Phone number | Leak confirmed | up to 4,480,000 records | — | Source(opens in a new tab) |
| Payment details | Leak confirmed | up to 4,480,000 records | — | Source(opens in a new tab) |
| User or member ID | Leak confirmed | up to 4,480,000 records | — | Source(opens in a new tab) |
Counts are the figures the organization announced. Because the same person may be counted more than once, we do not add the rows together.
General steps based on the type of data involved. Check the organization’s notice or help line to see whether you are affected.
Picked from the cause of the incident: tools that help you check your own systems for the same kind of weakness, or spot the warning signs.
An agentless vulnerability scanner that checks the packages installed on a server and lists the ones affected by known CVEs.
A free security platform (SIEM/XDR) that collects logs, configuration, and vulnerability data from agents on your endpoints and shows it all in one dashboard.
An intrusion detection and prevention engine (IDS/IPS) that matches network traffic against rules and records suspicious activity as alerts.
UpDown to select Enter to open Esc to close