Syuppin announced that information on 77,204 registered recipients of Map Camera email deliveries may have been disclosed externally. The incident is believed to have resulted from unauthorised access to Cuenote FC, operated by outsourced service provider Ymir Link.
On 30 October 2026, Syuppin updated its announcement, stating that information on 77,204 records registered in the Map Camera address book for email newsletters may have been disclosed externally as a result of unauthorised access to Cuenote FC, operated by Ymir Link, which handles its email delivery operations. The affected data included email addresses, points balances, points expiry dates and prefecture names. Syuppin said that no intrusion into its core systems had been confirmed.
Previous announcements had not specified the number of records, but Syuppin received a detailed data report from the service provider on 29 October and updated its official notice at 13:00 on 30 October. The affected data was initially said to be limited to Map Camera address-book data, with an investigation still under way into whether the content of OneToOne messages was included. In a subsequent update, Syuppin amended its explanation, stating that arrival and price-reduction notifications were not among the affected data.
Because the disclosed information includes points balances and expiry dates, the risk of secondary damage has been raised. However, Syuppin has not announced that the disclosure has been confirmed and said that the scope may change as the investigation progresses. Syuppin urged customers to verify suspicious communications through official channels, and said it was requiring the service provider to identify the affected data items and thoroughly implement measures to prevent a recurrence.
As a response, Syuppin suspended deliveries via Cuenote FC on the night of 19 October. Ymir Link explained that it had applied vulnerability patches, detected and isolated suspicious files, deleted unnecessary accounts and restricted connection-source IP addresses. The Map Camera, GMT, BRILLER and KINGDOM NOTE websites have continued normal operations, but some email delivery functions remain suspended.