Unauthorized access to “Ymir Link” affects a wide range of industries; outsourcing of email distribution

Ymir Link, which handles e-mail distribution services, received unauthorized access from an external party, which has affected various outsourcing companies, including JR and financial institutions. Companies are urging caution as there is a possibility that email addresses and other information may be leaked.

JR Tokai, West Japan, and Kyushu announced on the 26th that there is a possibility of information leakage regarding 170,000 email addresses and katakana names of members of the Tokaido, Sanyo, and Kyushu Shinkansen reservation services ``Express Reservation'' and ``Smart EX.'' The targets are members who have sent out emails promoting travel products or informing them of train time changes in the event of the 2026 Kumamoto Earthquake. Dai Nippon Printing has also announced the impact on ``honto,'' a site that sells e-books. It is possible that the names and email addresses of customers receiving email newsletters may have been leaked.

Among financial institutions, the Resona Group announced on the 27th that information such as the email addresses of customers sent notifications at its affiliated companies Resona Bank, Saitama Resona Bank, and Kansai Mirai Bank may have been leaked. It says it does not include account numbers, PIN numbers, or credit card information.

Nomura Securities has also stated that there is a possibility that information such as subscriber email addresses may be leaked through its ``i-Port'' asset management information management tool for financial institutions. It does not include information about assets or securities trading accounts.

The Asahi Shimbun and the Mainichi Shimbun have also said that personal information may have been leaked.

Ymir Link has announced that information was leaked from a total of 49 systems managed by the company, including Cuenote FC, and as of the 26th, a total of 51.62 million pieces of personal information, including email addresses, may have been leaked. The investigation continues and the number of cases may increase.

◇

The email distribution service "Cuenote FC", which is also used by Asahi Shimbun, received unauthorized access, and we are taking necessary measures such as changing the passwords of related administrative accounts. We will work with Ymir Link to confirm the scope of impact and details of externally outputted information, and will notify you as soon as we find out.