Japan's Muji has the largest personal information leak in history! The president bowed and apologized
Ryohin Kekei, the parent company of Japanese daily necessities brand Muji, held a press conference today, and its president, Satoshi Shimizu, bowed and apologized. The company admitted that its system was hacked and that up to 27.26 million members' mailboxes and other information may have been leaked, and about 1.09 million credit card numbers were leaked.
Quick Look
- A large-scale personal information leak occurred at Ryohin Kepenko, the parent company of Muji, Japan.
- President Satoshi Shimizu bowed publicly and apologized today.
- The company admitted that the system was hacked and that up to about 27.26 million member mailboxes and about 1.09 million credit card numbers may have been leaked.
AI-generated summary
Why It Matters
The system of MUJI's parent company, Ryohin Plan, was hacked, resulting in the leakage of a large number of member and credit card information.
MUJI is a Japanese lifestyle groceries brand that specializes in simple, unbranded, natural-made clothing, furniture, stationery and food. It also has many stores in Taiwan. The picture shows the Ginza flagship store in Tokyo.
Japan's Muji parent company Ryohin Kepenko held a press conference today after a large-scale personal information leak occurred. President Shimizu Satoshi publicly bowed and apologized, saying "I sincerely apologize for causing great concern and distress to everyone."
Ryohin Project announced that after the company system was hacked, the mailboxes and other information of up to 27.26 million members, including those who have withdrawn from membership, may have been leaked, and about 1.09 million credit card numbers were leaked. In addition, hackers also used passwords leaked from other services to try to log into member accounts in large numbers, resulting in the possible leakage of about 270,000 pieces of personal information.
The company admitted that the credit card numbers should have been replaced so that they could not be identified by third parties when they were being kept, but it was not actually done so. In addition, although internal regulations require that the data of those who have withdrawn from membership be deleted after a certain period of time, some of it has not been deleted.
Regarding the follow-up processing, Ryohin Keikai stated that it will strengthen system monitoring. For customers whose credit card numbers have been leaked, it will fully bear the card re-issuance fee. If actual damage is confirmed, compensation will be based on the content. As for the responsibility of the management team, Shimizu Satoshi said that it will first let the incident end, establish a trustworthy mechanism, and then hand it over to the board of directors for discussion.
What to Watch
AI outlook — possibilities, not facts
Ryohin Keikan will fully bear the card re-issuance fee and provide actual victim compensation.
Very likely · Within months
Open Questions
- What is the true identity of the hacker organization?
- Has the exact leaked information been used illegally?






