吉野家 HD disclosed unauthorised access to its recruitment management platform, resulting in the leakage of a total of 5,784 records of applicants and employees. The period was from 11 April 2022 to 30 June 2024.
吉野家ホールディングス announced that unauthorised access by a third party occurred on the recruitment management platform operated by ApplyNow, which had been partly outsourced recruitment work for part-time positions at 吉野家 and Hanamaru, resulting in the leakage of personal information. The leaked information included data on applicants and employees involved in recruitment, covering the period from 11 April 2022 to 30 June 2024.
A total of 5,784 records were affected: 4,998 relating to 吉野家, 368 to Hanamaru and 418 to the 吉野家 Group. The company said that unauthorised access has now been blocked, the vulnerability that caused the incident has been remediated, and no secondary damage has been identified.
Going forward, the company plans to review its management of outsourcing providers and further strengthen its information-security framework, including screening when introducing SaaS products and log management. 吉野家 HD expressed its appreciation to those affected and said it would continue its investigation.