TOKYO – Muji brand operator Ryohin Keikaku Co. said Wednesday that about 1.09 million customer records, including credit card numbers, may have been leaked following unauthorized access to its system.
About 345,000 of the potentially leaked Muji Card customer records contain full numbers of currently valid credit cards and dates of birth, the operator said.
Late last month, the company also reported that up to 27.26 million customer records may have leaked following unauthorized access to its Muji App.
Earlier Wednesday, Nomura Investor Relations Co., a subsidiary of Nomura Holdings Inc., said a system providing information services to institutional investors and analysts had been subject to unauthorized access, resulting in a data breach.
The firm’s announcement came after major electronics retailer Bic Camera Inc. said Monday it may also have been affected by the latest string of data leaks. It said about 14.9 million customer records, including email addresses, may have leaked due to unauthorized access to the system of a contractor handling its email newsletter distribution.
Nomura Investor Relations has not disclosed the number of records affected but said the leaked information may include personal data such as names and email addresses. It has suspended the service and is investigating the extent of the impact.
The affected service is Institutional Navi, which provides information on corporate earnings briefings and supports attendance management. Unauthorized access was detected on Monday, and the data breach was confirmed the following day.
Nomura Investor Relations said it has also suspended an information service for individual investors that uses the same server, as a precautionary measure, and is investigating whether it had also been subject to unauthorized access.
Meanwhile, Bic Camera said the compromised email distribution system was run by Arara Inc. No credit card information or online shopping login credentials were included, it said.
Affected data possibly consists of customer information from Bic Camera and its subsidiaries, Kojima Co. and Sofmap Co. Bic Camera said it is investigating the extent of the impact but that no secondary damage has been confirmed so far.
Japanese regional airlines Airdo and Solaseed Air were also affected by data breaches stemming from unauthorized access to email distributor Arara’s system.
Airdo, headquartered in Sapporo on Japan’s northernmost main island of Hokkaido, said Wednesday that 673,920 email user records had been leaked, while Solaseed Air, based in Miyazaki on the southwestern main island of Kyushu, said up to 490,000 email addresses had been leaked.
Both airlines said credit card information and names were not compromised.
Workwear producer Workman Co., another client of Arara’s email distribution service, said up to 1.45 million email addresses may have leaked.
About the Author
