Muji operator apologizes for data breach - NHKニュース
Ryohin Keikaku, operator of the Muji retail chain, has apologized for a massive data breach affecting over 27 million email addresses and nearly 1.1 million credit card numbers.
The operator of the Muji chain of retail stores is one of the latest Japanese companies hit by cyberattacks. Its president has apologized for breaches of customer data, including more than a million credit card numbers. The compromised data include that of former members.
Scale of breach
The company has revealed that more than 27 million e-mail addresses and nearly 1.1 million credit card numbers may have been leaked. A further 270,000 pieces of customer information might have been compromised in cyberattacks using passwords illegally obtained from other services.
Security failures
The company acknowledged that part of its system had vulnerabilities allowing unauthorized access. It also admitted that information of some former members had not been deleted despite internal rules requiring it after a certain period.
Part of our system had vulnerabilities that allowed unauthorized access from outside. We take responsibility for what has happened, and take it very seriously.
Response measures
Shimizu vowed to correct deficiencies in the system and tighten monitoring. The company says it will bear the full cost of replacing the credit cards and offer compensation based on its assessment of any damage confirmed.
Related
