3 sites operated by Hankyu Hanshin Department Stores, including its event reservation site, were subject to unauthorized access, and some of approximately 1.26 million customer records, including names, were leaked. No unauthorized use has been confirmed at this time, and services are scheduled to resume after the cause is investigated and measures are taken to prevent a recurrence.
In its announcement, H2O Retailing said that unauthorized access had been confirmed at 3 sites, including the event reservation site operated by Hankyu Hanshin Department Stores. The leaked information may include customers’ names, addresses, email addresses and telephone numbers, but it is said to involve only some of the 1.26 million records, not all of them. No unauthorized use or secondary harm has been confirmed at this time.
The affected sites were the Hankyu Department Store and Hanshin Department Store reservation site, the e-commerce site “HANKYU HANSHIN E-STORES,” and “Remo Order,” which allows customers to purchase in-store products online. Unauthorized access was confirmed on the 17th. Payment information such as credit cardholder names, the last 4 digits and expiry dates is handled, but full card numbers and security codes are not retained, so any leak would not necessarily lead directly to unauthorized use.
The company will contact affected customers by email in stages, investigate the cause and correct the system, and plans to resume services once safety has been confirmed. Although no unauthorized use has been confirmed at this time, further details on the investigation and the official resumption date are pending.