Credit card numbers may have leaked in cyberattack on Muji

Muji brand operator Ryohin Keikaku Co. announced Wednesday that approximately 1.09 million customer records, including credit card numbers and dates of birth, may have been compromised due to unauthorized access to its system. Additionally, the company disclosed that up to 27.26 million customer records could have been leaked following unauthorized access to its Muji App.

Meanwhile, Nomura Investor Relations Co., a subsidiary of Nomura Holdings Inc., reported a data breach affecting its Institutional Navi service, which provides information on corporate earnings briefings and supports attendance management. Nomura has suspended the service and is investigating the potential impact on personal data such as names and email addresses.

Bic Camera reported unauthorized access to its email newsletter distribution system, which may have resulted in the leak of around 14.9 million customer records, including email addresses. The affected service was operated by Arara Inc., and no credit card information or online shopping login credentials were included. Bic Camera is investigating the extent of the impact but has not confirmed any secondary damage.

Airlines Airdo and Solaseed Air also suffered data breaches from unauthorized access to the email distributor Arara's system, with Airdo experiencing 673,920 leaked email user records and Solaseed Air potentially losing up to 490,000 email addresses. Neither airline reported the compromise of credit card information or personal names.

Workman Co., another client of Arara, disclosed that up to 1.45 million email addresses may have been leaked.