Visionary Holdings: customer data of up to 1,832 people of Megane Super may have been improperly obtained at stores that took over its former outlets

1. 2023-02-04

   Data of a staff member registered as a customer was searched on the POS it had lent to the operating company of a transferee store. From around August 2022 until March 28, 2023, the borrowers could search its customer data. [1] [2]

2. 2023-08-11

   A staff member who had never used the transferee store "Eifuku Megane" received a direct mail from it. [1] [2]

3. 2023-08-13

   A check found that the staff member's data had been searched on that POS on February 4, 2023. It learned that data of 4,061 customers in total was searched between August 2022 and March 28, 2023, and that paper sheets with vision and hearing test results may remain at the transferee stores. [1]

4. 2023-08-15

   It announced the case. It has notified the police and reported to the Personal Information Protection Commission. [1] [2]

5. 2023-09-19

   It published a follow-up. After removing duplicate searches, customer data that a third party may have improperly obtained came to at most 1,832 records. Together with the customers whose paper vision and hearing test sheets may remain at the transferees, it mailed notices to 6,903 people in total. [3] [4]

Data of up to 1,832 customers (name, gender, birth date, address, phone number, email address, purchase history and so on) was searched. The count was first given as 4,061 and became 1,832 after duplicate searches were removed. In addition, up to 5,707 sheets of vision test results and up to 151 sheets of hearing test results may remain at the transferee stores "Eifuku Megane" and "Chitofuna Megane". Credit card data is not included. No improper use of personal data other than that of the staff member has been confirmed. [1] [2] [3] [4]