On 27 September, Tokyo Metro announced unauthorized access to the service for Metro Point Club members. Access by a third party from outside Japan is possible, and approximately 59,000 email addresses may have been exposed.
On 27 September, Tokyo Metro disclosed unauthorized access to the service for Metro Point Club (Metpo) members. The announcement said the incident came to light after an anomaly was detected in usage records for the service’s email distribution function, followed by an investigation.
According to the investigation, a system issue occurred in the service’s email distribution function on 20 September, and usage records differing from normal were discovered on 25 September. The company reportedly determined that access by a third party from overseas was highly likely.
The incident may have resulted in the exposure of approximately 59,000 Metpo members’ email addresses to external parties, although the article states that no leakage of other personal information has been confirmed. Further information is expected to be disclosed.