KEYUCA investigates October supplier breach; up to 77,105 records potentially exposed
KEYUCA announced on 11 November that a follow-up investigation into a breach of supplier Nanotech’s server, identified on 21 October 2026, had confirmed a leak of customer information. The attacker exploited a web application vulnerability to install malware and obtain information. Up to 77,105 records are affected, including potentially exposed records, containing names, telephone numbers and order information, as well as addresses and gender for some customers.
Key facts
- Affected organisation
- KEYUCA
- Incident type
- Data breach
- Occurred / detected
- 2026-10-21
- Scale of damage
- Up to 77,105 customer information records affected, including potentially exposed records
- Cause / method
- Exploitation of a web application vulnerability on a supplier’s server
- Location
- Japan
If your data was exposed
Exposed dataNamePhone numberAddressUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- A leak of customer information from KEYUCA’s supplier’s server was confirmed, with up to 77,105 records reported to be affected, including potentially exposed records.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.