MUJI curtain subcontractor's server breached; 19,933 customer records potentially exposed
MUJI operator Ryohin Keikaku announced on 2 November that customer information may have leaked from a server managed by Nanotech, a subcontractor handling made-to-order curtains. In an investigation on 28 October, Nanotech identified signs of unauthorised external access on 19 October. The potentially affected data consists of 19,933 customer records relating to orders placed between 10 April 2018 and 25 January 2022, including names, addresses, telephone numbers, order information and delivery addresses; whether any data actually leaked remains under investigation.
Key facts
- Affected organisation
- Ryohin Keikaku
- Incident type
- Hacking & intrusion
- Occurred / detected
- 2026-10-19
- Scale of damage
- Potential exposure of 19,933 customer records, including duplicate records for the same customers. Names, addresses, telephone numbers, order information and delivery addresses are affected; actual disclosure remains unconfirmed.
- Cause / method
- Unauthorised access
- Location
- Japan
Timeline
- Unauthorised access involving a contractor handling MUJI's made-to-order curtains was disclosed.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.