A member management system operated by a subsidiary of BOOKOFF GROUP HOLDINGS LIMITED was subject to unauthorized access, and it was announced that up to 6.43 million member records may have been leaked. Concerns have also been raised over the potential leakage of member information at Suzuki Village and JR Kyushu.
A system containing member information managed by a subsidiary of BOOKOFF GROUP HOLDINGS LIMITED was accessed externally. Unauthorized access was confirmed on the 6th and announced on the 9th, with up to approximately 6.43 million records potentially leaked.
Potentially leaked information includes names, dates of birth, email addresses and addresses, as well as points card numbers and membership numbers. Payment information and driver's license data, however, were not held on the system and are not included in the scope.
Separately, Suzuki Village is reported to have potentially leaked member information for approximately 3,000 people. JR Kyushu disclosed that up to approximately 1.3 million email addresses registered for its web membership service may have been leaked.
No misuse of the leaked information has been reported as confirmed at this time, but the companies are continuing their investigations and awaiting disclosure of additional facts.