ENKR

Matsuya official app member data breach

Add to my breach check

Made public

What leaked7

Replaceable

  • Password

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Other profile data

Permanent

  • Date of birth
  • Full name
  • Passwordencrypted passwords of registered app members only · 2,000 to 3,000
  • Date of birthregistered app members only · 2,000 to 3,000
  • Mobile numberphone number · type not stated
  • Home or delivery addressdelivery address of Matsuben Net, Mobile Order and Matsuben Delivery customers
  • Email addressregistered app members only · 2,000 to 3,000
  • Other profile datamember ID and Matsuya points; prefecture for registered app members

To-dos6 · about 1 h 30 min in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  3. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover, SMS code theft
  4. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  6. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next9 events

  1. UndetectedNone on record
  2. Response 4 eventsNo individual notice on record · Back to latest
  3. Remedy 5 eventsUntil December 27, 2026 · show events
  4. PenaltyNone on record
  5. DisputesNone on record

Response: 4 events

Back to latest
  1. Apologised in its notice
  2. Announced the leak of about 2.38 million records from the official app's management system
  3. Official app and website stopped from the night of 28 October, with no date to resume
  4. Found that member data registered in the official app had leaked through unauthorised access to the app's management system
Company
Matsuya
Company detected it
Made public
Notice
Leak confirmed
Affected
2,377,127 records of customers who used Matsuben Net, Mobile Order or Matsuben Delivery; plus 2,000 official app member records, possibly up to 3,000 · company notice

Sources