MUJI online store, 270,000 unauthorized logins, names and addresses leaked?

Ryohin Keikaku announced on the 9th that there may have been an unauthorized login attempt by a third party other than the customer at the Muji online store it operates. There were approximately 270,000 traces of unauthorized logins, and customers' names, dates of birth, addresses, phone numbers, and purchase history may have been leaked.

According to Ryohin Keikaku, the company appears to have suffered a ``list-type attack,'' in which a third party attempts to log in by mechanically entering information such as email addresses and passwords that may have been illegally obtained from outside parties.

On October 30, Ryohin Keikaku announced that part of its official MUJI app system had been accessed illegally by an external party, and that up to 27.26 million items of personal information, such as email addresses and dates of birth, of customers, including those who had withdrawn from the service, may have been leaked. The company said it would "refrain from commenting" on the relationship with this list-based attack.

Ryohin Keikaku has strong security