ENKR

Sagawa Express parcel tracking service possible data leak

Add to my breach check

Made public

What leaked5

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Username

Permanent

  • Full name
  • Mobile numberphone number · the notice does not say mobile or landline
  • Email addressSmart Club members
  • Full namesenders and recipients of parcels taken in from June 21, 2026 to 09-30, freight-contract customers and Smart Club members; for companies, the contact person's name
  • UsernameSmart Club member ID

To-dos3 · about 30 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  3. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next11 events

  1. UndetectedNone on record
  2. Response 11 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. No misuse of the personal data, such as secondary harm, found so far
  2. Published the count: at most about 53.23 million personal-data records, duplicates included, not a count of people
  3. Fourth report: senders, recipients, contract customers and Smart Club members may be affected
  4. Opened a dedicated call centre for questions about the possible leak
  5. Preliminary report to the Personal Information Protection Commission
6 more
  1. Blocked outside access to the internet freight system at noon
  2. By 1 October, several web services were suspended, among them parcel tracking and its API, web pickup booking, delivery-address changes and the product-return refund service
  3. Second notice: customers' personal data may have leaked
  4. Partly restricted access to the parcel tracking service
  5. First notice of the unauthorised access posted on the website
  6. Found unauthorised access by a third party to the parcel tracking service on its website, at 7:30 JST
Company
Sagawa Express
Company detected it
Made public
Notice
Possible leak
Affected
53,230,000 personal-data records at most that may have leaked · approx.; duplicates included, not a count of people; company notice

Sources