Unauthorised logins may have exposed member data on Japan's official lottery site
Unauthorised logins and password changes made without users' consent were confirmed on some member accounts on Japan's official lottery website. Names, addresses, contact details, lottery purchase and prize information, and some bank account and card identifiers may have been viewed. The website and app were temporarily suspended, and an investigation is under way into unauthorised access and the extent of the impact, with credential stuffing suspected.
Key facts
- Affected organisation
- National Council of Local Government Lottery Offices
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Suspected credential stuffing
- Location
- Japan
If your data was exposed
Exposed dataNameAddressUsage & purchase historyBank accountCard details
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
Timeline
- The official lottery website temporarily suspended operations after passwords were changed without users' consent.
- Unauthorised logins to some member accounts and possible access to personal data, purchase and prize information, and other details became known, and the website and app were temporarily suspended.
5 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.