ENKR

Rohto Pharmaceutical mail-order phone and customer systems data breach

Add to my breach check

Made public

What leaked6

Replaceable

  • Card number
  • Card expiry date

Hard to replace

  • Mobile number
  • Home or delivery address
  • Other profile data

Permanent

  • Full name
  • Card numbercard number spoken in mail-order calls, 9,715 customers; no security codes
  • Card expiry date9,715 customers
  • Mobile numberphone number · type not stated
  • Other profile datarecordings of mail-order calls · questions and orders, September 2025 to September 2026

To-dos4 · about 45 min in all

  1. Have the card reissued with a new numberabout 15 minStops: card fraud online
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  3. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls, card fraud online
  4. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home
Company
Rohto Pharmaceutical
Company detected it
Made public
Notice
Leak confirmed
Affected
2,797,545 people in several customer management systems; separately, call recordings of 9,715 customers held card numbers · company notice of November 6, 2026

Outcome

Rohto reported the incident to the police on September 14, 2026 and to Japan's Personal Information Protection Commission on September 15, 2026. No decision.

Sources