ENKR

Ride On Express Gin no Sara / Kamatora possible data breach

Add to my breach check

Made public

What leaked9

Replaceable

  • Password

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Other profile data

Permanent

  • Date of birth
  • Purchase or order history
  • Full name
  • Gender
  • Mobile numberphone number · type not stated
  • Purchase or order historyorder history
  • Full namealso family members' names and birthdays, and delivery recipients' names, addresses and phone numbers where entered
  • Other profile dataDeli Point member ID

To-dos6 · about 1 h 30 min in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  3. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover, SMS code theft
  4. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  6. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next6 events

  1. UndetectedNone on record
  2. Response 6 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Second report filed: up to about 6.5 million registrant records may have leaked
  2. First report filed: system outage at the subsidiary, leak under investigation
  3. Orders through the official website and app stopped after the servers became unreachable
  4. Unauthorised access to servers used by the subsidiary detected from 5 October
  5. Reported to the local police
  6. Reported to the Personal Information Protection Commission
Company
Ride On Express
Company detected it
Made public
Notice
Possible leak
Affected
6,500,000 records at most, registrants of the Gin no Sara, Kamatora and Sushi Jyoto website and app · possible leak, not confirmed

How the facts developed

  1. Second report: unauthorised access detected from 5 October; up to about 6.5 million registrant records may have leaked
  2. First report: servers used by the subsidiary unreachable since 7 October; whether data leaked was under investigation

Sources