ヤマトホールディングス announced that approximately 5.3 million personal-information records, including those of users of its Kuroneko Deferred Payment Service, had been leaked. The exposure occurred from October 2018 through 28 September this year; unauthorized access was detected on 28 September, and the service resumed on 9 October.
ヤマトホールディングス disclosed that approximately 5.3 million records containing personal information on customers who used its Kuroneko Deferred Payment Service and their delivery recipients had been leaked. The information included names, addresses, telephone numbers and email addresses.
The service was subject to unauthorized access, and user information is believed to have been exposed over the period from October 2018 through 28 September this year. The company detected the unauthorized access on 28 September and suspended the service from that day.
The service subsequently resumed on 9 October after an environment had been established to ensure its security. Attention is focused on further information regarding the specific scope of the leak and measures to prevent the damage from spreading.
In response to the incident, media reports have presented it as a case involving ヤマトホールディングス as the company concerned. The focus is now on the company's internal response and the disclosure of measures to prevent a recurrence.