Muji operator says 1.09 million customer records, including card numbers, may have leaked
Ryohin Keikaku says about 345,000 Muji Card records hold full valid card numbers and birth dates, weeks after up to 27.26 million Muji App records may have leaked.
Why it matters
Muji is the latest in a run of Japanese corporate leaks: Bic Camera said up to 14.9 million records may have leaked through an email contractor, and Nomura Investor Relations reported a breach the same day as Muji. The card disclosure matters because earlier the company had said no financial data was involved. Japan's government plans to announce an emergency cybersecurity package on 6 November with a single contact point for victims and wider use of AI to find vulnerabilities. Watch for how the attackers got in and any reports of card fraud.
Key facts
- About 1.09 million customer records may have leaked
- About 345,000 Muji Card records include full valid card numbers and birth dates
- Affects Muji Card members who joined before July 2021
- Late October: up to 27.26 million Muji App records may have leaked
- Bic Camera: about 14.9 million records via an email contractor
- Japan plans an emergency cybersecurity package on 6 November