MUJI curtain subcontractor's server breached; 19,933 customer records potentially exposed
MUJI operator Ryohin Keikaku announced on November 2 that customer information may have leaked from a server managed by Nanotech, a subcontractor handling made-to-order curtains. During an investigation on October 28, Nanotech found evidence of unauthorized external access on October 19. The potentially affected data comprises 19,933 customer records from orders placed between April 10, 2018, and January 25, 2022, including names, addresses, phone numbers, order information, and delivery addresses; an investigation is ongoing to determine whether any data actually leaked.
Key facts
- Affected organization
- Ryohin Keikaku
- Incident type
- Hacking & intrusion
- Occurred / detected
- 2026-10-19
- Scale of damage
- Potential exposure of 19,933 customer records, including duplicate records for the same customers. The affected data includes names, addresses, phone numbers, order information, and delivery addresses; actual disclosure has not been confirmed.
- Cause / method
- Unauthorized access
- Location
- Japan
Timeline
- Unauthorized access involving a contractor handling MUJI's made-to-order curtains was disclosed.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.