OPENLOGI breach exposes seven months of delivery data
Japanese logistics company OPENLOGI experienced unauthorised access on 8–9 November, and some delivery data received from 8 April to 8 November was exfiltrated. The data included recipients’ names, addresses, telephone numbers, email addresses and product information. By 12 November, 13 client companies and services had announced impacts, while the full extent of the breach remained under investigation.
Key facts
- Affected organisation
- OPENLOGI
- Incident type
- Data breach
- Occurred / detected
- 2026-11-08
- Scale of damage
- Some dispatch data covering approximately seven months leaked; the total number of records remains under investigation.
- Cause / method
- Unauthorised access to the logistics system led to the theft of dispatch data.
- Location
- Japan
If your data was exposed
Exposed dataNamePhone numberEmailAddressUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Unauthorised access to OPENLOGI began, and the intrusion continued into the following day.
- The exfiltration of some delivery data received over the preceding seven months was disclosed.
- Thirteen client companies and services announced related impacts.
- A leak of 3,358 records relating to Toei Animation’s online lottery service was confirmed.
Also affected by this incident
Kimagure Cook's agency Carry On warns of possible buyer data leak after logistics provider hack
↳ Knock-on damage from the OPENLOGI incident · View original incidentCarry On, the agency representing Kimagure Cook, said buyers' personal information may have been leaked following unauthorised access to its logistics contractor OpenLogi on 8–9 November 2026. The potentially affected data covers shipment requests made from 8 April to 8 November and includes recipients' names, addresses and phone numbers, registered email addresses, and product information. The number of people affected and the detailed scope of the impact remain under investigation.
Read on Yahoo!ニュース ↗OPENLOGI breach may have exposed REALITY Studios customer data
↳ Knock-on damage from the OPENLOGI incident · View original incidentImpact: Possible exposure of recipient, delivery, contact and product information for official online shop customers; affected customers and number of records under investigation
Logistics contractor OPENLOGI’s systems were breached on 8–9 November 2026, and some dispatch data was exfiltrated. REALITY Studios said customer information from its official online shop may also have been included. The information concerned consists of recipient names, delivery addresses, telephone numbers, registered email addresses and product information, with the specific affected customers and number of records still under investigation.
Read on VTuber NewsDrop ↗
12 related reports
- オープンロジ情報漏洩・不正アクセス事案
- 物流アウトソーシング オープンロジに不正アクセス、出荷データが持ち出される 13社・サービスが影響を公表
- オープンロジへの不正アクセスのまとめ、配送先の個人情報が流出 HUMAN MADE「CURRY UP」・Bitfan・マイネットにも影響の恐れ
- Openlogi says hackers took recipient data from seven months of shipments
- オープンロジの情報漏えい（2026年）対象者・補償・原因
- オープンロジへの不正アクセスのまとめ、配送先の個人情報が流出 HUMAN MADE「CURRY UP」・Bitfan・マイネットにも影響の恐れ|セキュリティニュースのセキュリティ対策Lab
- オープンロジに不正アクセス、配送先情報が漏えい
- 物流代行のオープンロジに不正アクセス、届け先の氏名・住所が流出 7カ月分の出荷データ
- オープンロジが不正アクセスを受け出荷データの配送先個人情報が外部に持ち出される
- 複数のVTuberグッズストアで購入者情報流出の恐れ 物流の委託先に不正アクセスで複数社が注意喚起（KAI-YOU）
- 【11月13日更新】オープンロジ不正アクセス、影響企業相次ぐ
- Do you send customer shipping data to a fulfillment company? Openlogi says attackers took delivery details from shops that use its warehouses.
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.