ENKR

H2O Retailing H2O ID data breach

Add to my breach check

Made public · 1,260,000 H2O ID member records

What leaked11

Replaceable

  • Card expiry date

Hard to replace

  • Mobile number
  • Home or delivery address
  • Partial card number
  • Email address
  • Other profile data
  • Username

Permanent

  • Date of birth
  • Purchase or order history
  • Full name
  • Gender
  • Date of birthdate of birth and age
  • Card expiry dateE-STORES and Remo Order; under investigation
  • Mobile numbermobile and other phone numbers
  • Home or delivery addresspostal code and address; possibly also address book entries · E-STORES and Remo Order; under investigation
  • Purchase or order historyHANKYU HANSHIN E-STORES and Remo Order order history; whether it leaked is under investigation
  • Partial card numbercard brand, last 4 digits and cardholder name · E-STORES and Remo Order; under investigation; full numbers and security codes are not stored
  • Full namein kanji and kana; possibly also address book entries · E-STORES and Remo Order; under investigation
  • Other profile datawhich services the member uses with H2O ID; possibly also point-card type and last 4 digits · E-STORES and Remo Order; under investigation
  • UsernameH2O ID

To-dos4 · about 50 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  3. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home
  4. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: SMS code theft

What happened next9 events

  1. UndetectedNone on record
  2. Response 9 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. H2O Retailing: no unauthorised use or secondary harm thought to come from the incident confirmed so far
  2. Opened toll-free lines and an inquiry form
  3. Announced that part of the data of about 1.26 million H2O ID members had leaked
  4. Found unauthorised access to HANKYU HANSHIN E-STORES and Remo Order and shut both down
  5. Cut off the malicious traffic and shut down the reservation site
4 more
  1. Confirmed unauthorised access to the customer management system through the stores' reservation site
  2. Began emailing H2O ID members
  3. Filed a damage report with the local police
  4. Reported to the Personal Information Protection Commission
Company
H2O Retailing
Company detected it
Made public
Notice
Leak confirmed
Affected
1,260,000 H2O ID member records · about; almost all members

Sources