ニモカ, a Nishi-Nippon Railroad-affiliated company, announced that 521 records of personal information had been leaked following unauthorized access. The leaked information included IC card numbers, dates of birth and registered email addresses, while no leakage of names, addresses or telephone numbers has been confirmed.
ニモカ, a Nishi-Nippon Railroad-affiliated subsidiary based in Fukuoka, disclosed that its usage history inquiry service for the “nimoca” transit IC card had been subject to unauthorized access, resulting in the leakage of 521 records of personal information. The leaked data consisted of registered IC card numbers, dates of birth and registered email addresses, and did not include names, addresses or telephone numbers. No unauthorized use has been confirmed at this time.
The unauthorized activity was identified at around 9:00 on the 4th after a user contacted the company to report receiving an email they did not recognize. The company then investigated the matter and suspended the usage history inquiry service at around 17:40. The payment function and normal use of nimoca remained available.
The company said it is investigating the cause and scope of the impact and working to restore the service. The official information currently available indicates that the company is awaiting the results of its further investigation. It said it is considering how to respond to affected users.
If a formal additional announcement is made regarding the matter, subsequent reports will need to be monitored. Based on the information currently available, the extent of the leakage and its specific impact have not been determined.