ENKR

Sagawa Express parcel tracking service possible data leak

Add to my breach check

Made public

What leaked5

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Username

Permanent

  • Full name
  • Mobile numberphone number · the notice does not say mobile or landline
  • Email addressSmart Club members
  • Full namesenders and recipients of parcels taken in from June 21, 2026 to 09-30, freight-contract customers and Smart Club members; for companies, the contact person's name
  • UsernameSmart Club member ID

To-dos3 · about 30 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  3. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next11 events

  1. UndetectedNone on record
  2. Response 11 eventsNo individual notice on record · Back to latest
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record

Response: 11 events

Back to latest
  1. No misuse of the personal data, such as secondary harm, found so far
  2. Published the count: at most about 53.23 million personal-data records, duplicates included, not a count of people
  3. Fourth report: senders, recipients, contract customers and Smart Club members may be affected
  4. Opened a dedicated call centre for questions about the possible leak
  5. Preliminary report to the Personal Information Protection Commission
6 more
  1. Blocked outside access to the internet freight system at noon
  2. By 1 October, several web services were suspended, among them parcel tracking and its API, web pickup booking, delivery-address changes and the product-return refund service
  3. Second notice: customers' personal data may have leaked
  4. Partly restricted access to the parcel tracking service
  5. First notice of the unauthorised access posted on the website
  6. Found unauthorised access by a third party to the parcel tracking service on its website, at 7:30 JST
Company
Sagawa Express
Company detected it
Made public
Notice
Possible leak
Affected
53,230,000 personal-data records at most that may have leaked · approx.; duplicates included, not a count of people; company notice

Sources