Japan Post Holdings disclosed unauthorized use of customer IDs known as Yu ID, and confirmed unauthorized logins to the official Yu-Yu Points website. A list of IDs and passwords leaked externally is believed to have been misused.
On 19 October 2026, Japan Post Holdings announced that it had confirmed unauthorized logins to the official Yu-Yu Points website following unauthorized use of customer IDs known as Yu ID. The announcement indicated that a list of IDs and passwords leaked externally may have been misused.
Regarding the nature of the unauthorized use, it was suggested that unauthorized logins may have been carried out using a list of IDs and passwords, including Yu IDs, that had been leaked externally. The announcement did not provide detailed information on specific impacts, such as access to the official website or the awarding of points.
The article records only the information stated in its main text regarding additional information and future developments in the response to this matter; no definitive follow-up information had been provided at that time.