Japan's Muji APP explodes in data security crisis, 27.26 million customer personal information may be leaked

Ryohin Keikai announced on the 30th that its official application "MUJI APP" may have leaked approximately 27.26 million pieces of customer personal information.

Japan's Ryohin Planning Company, which owns the well-known brand "MUJI", announced today (30th) that its official application "MUJI APP" may have leaked approximately 27.26 million pieces of customer personal information.

"Mainichi Shimbun" reported that Ryohin Keke published an announcement on its official website titled "Explanation on the possible leakage of customer information of MUJI official application "MUJI APP"", stating: "Ryohin Keke Co., Ltd., which operates MUJI, has confirmed that part of the MUJI official application "MUJI" held by the company APP's customer information may have been leaked to the outside, and we would like to inform you." And then apologized and stated: "We are deeply sorry for causing concern to customers and related personnel."

Information currently known to have been potentially leaked includes email addresses, date of birth and gender. As for sensitive information such as credit card information, name, address and phone number, it is not included in the scope of this leak. The maximum number of affected pieces of data is approximately 27.26 million, which also includes the data of customers who have canceled their accounts.

Ryohin Keke stated that after detecting illegal access from the outside, it immediately cut off the connection to the area and applied a repair procedure. The official stressed: "So far, no relevant customer information has been confirmed to have been leaked to the dark web, nor has any damage been found to have been misused."

However, considering that "fake phishing emails" that maliciously use this information may appear in the future, Ryohin Kaplan specifically appeals to the public: "If you receive a suspicious email, please be vigilant and do not click on the URL link attached to the email, and do not enter any personal information."