ENKR

Matsuya official app member data breach

Add to my breach check

Made public

What leaked7

Replaceable

  • Password

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Other profile data

Permanent

  • Date of birth
  • Full name
  • Passwordencrypted passwords of registered app members only · 2,000 to 3,000
  • Date of birthregistered app members only · 2,000 to 3,000
  • Mobile numberphone number · type not stated
  • Home or delivery addressdelivery address of Matsuben Net, Mobile Order and Matsuben Delivery customers
  • Email addressregistered app members only · 2,000 to 3,000
  • Other profile datamember ID and Matsuya points; prefecture for registered app members

To-dos6 · about 1 h 30 min in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  3. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover, SMS code theft
  4. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  6. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next9 events

  1. UndetectedNone on record
  2. Response 4 eventsNo individual notice on record · show events
  3. Remedy 5 eventsUntil December 27, 2026 · show events
  4. PenaltyNone on record
  5. DisputesNone on record
  1. buyers of the app MATSUYA PASS from 26 September to 28 October get a 30-day app pass for 28 November to 27 December, once the app is backUntil December 27, 2026
  2. app members get a rank one level above their planned member rank for November and December
  3. Emailed app MATSUYA PASS holders whose pass runs past 1 November a QR code to get the pass discount at the ticket machines during the outage
  4. Said app members will get compensation for the period the service is stopped
  5. Apologised in its notice
4 more
  1. Announced the leak of about 2.38 million records from the official app's management system
  2. Discount coupon for the ticket machines, posted on the Matsuya and Matsunoya X accounts as an apology; usable until 15:00 JST on 11 NovemberEnded November 11, 2026
  3. Official app and website stopped from the night of 28 October, with no date to resume
  4. Found that member data registered in the official app had leaked through unauthorised access to the app's management system
Company
Matsuya
Company detected it
Made public
Notice
Leak confirmed
Affected
2,377,127 records of customers who used Matsuben Net, Mobile Order or Matsuben Delivery; plus 2,000 official app member records, possibly up to 3,000 · company notice

Sources