Yojiya Group breach exposes personal data of 131,557 members
Unauthorised use of Japanese company Yojiya Group's member information lookup API allowed an outside party to obtain the personal information of 131,557 members. The leaked data included names, addresses, telephone numbers, dates of birth, email addresses, membership numbers and purchase statistics, with up to 134,344 people potentially affected. The company announced the incident on 9 November and is investigating how the API authentication key was leaked.
Key facts
- Affected organisation
- Yojiya Group
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Confirmed leak of personal information belonging to 131,557 members, with up to 134,344 people potentially affected
- Cause / method
- Unauthorised use of the member information lookup API; the circumstances of the API authentication key leak remain under investigation
- Location
- Japan
If your data was exposed
Exposed dataNamePhone numberEmailAddressDate of birthUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The company announced a leak of personal information belonging to 131,557 members and a potential impact on up to 134,344 people.
- It was disclosed that an investigation into how the API authentication key was leaked was ongoing.
4 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.