Ryohin Keikaku Co., Ltd.
Additional Report on Postponement of MUJI Online Store Reopening and Unauthorized Access
Reopening of the MUJI online store postponed. It was found that there may have been unauthorized logins by third parties, resulting in a potential leak of information including approximately 27,260,000 email addresses and other personal data; partial leakage of credit card information was also confirmed. Upon reopening, users will be required to reset passwords; additional investigation and security enhancements will be implemented. A certain degree of potential impact on financial results is anticipated, but this remains undetermined.
Key Figures
- Number of affected individuals: approx. 27,260,000 cases (email address, birthdate, gender, member ID)
- Credit card information affected: approx. 1,090,000 cases (first 6 digits and last 2 digits of credit card number, MUJI Card ID, name)
- Delivery destination information affected: approx. 440,000 cases (recipient name, recipient postal code)
AI要約
Key points of the news
Today, Ryohin Keikaku Co., Ltd. announced a postponement of the MUJI online store reopening and disclosed additional details of newly discovered unauthorized access. Due to a credential-stuffing type attack by a third party, there is a possibility that MUJI app and online store users' email addresses, birthdates, names, addresses, purchase histories and other information were exposed. Approximately 27,260,000 affected user records and about 1,090,000 credit card records (not full card numbers) have been identified as potentially impacted.
Future measures and impact
At reopening, all users will be required to reset their passwords. Comprehensive security measures will be further strengthened, and the reopening date will be announced once decided. A certain degree of potential impact on financial results is expected, but specific figures are not disclosed at this time.
Ryohin Keikaku Co., Ltd.
Company overview · Stock price · Financial data · All IR
