[Contained][Severity: Critical][Intrusion]

Hands: Hands Club app breached; member data leaked

On 27 January 2025, Hands disclosed that exploitation of software used by its app system exposed 121,886 member records. The access began on 27 November 2024, and abnormal login activity was detected on 2 December. Affected fields included names, emails, login passwords, addresses, phone numbers, genders and birth dates; payment-card details were excluded. Hands said no further unauthorized access had been detected following successive emergency measures.

Disclosed

2025-01-27

Organizations involved

Leaked or at risk

121.9K

121,886

Downtime

Unknown

Timeline

Started 2024-11-27
Detected 2024-12-02
Disclosed 2025-01-27
61 days

Attack or cause

Method: [Intrusion]
Impact: [Data leak]
Entry point: Unknown

Data exposed or at risk

[Name][E-mail address][Passwords][Postal address][Phone number][Gender][Date of birth]

Organizations involved

[Breached][Critical]Tokyo, ShinjukuWholesale and retail trade121,886 leaked
Hands Inc.

						Note
Hands Inc.	[Breached]	[Critical]	Tokyo, Shinjuku	Wholesale and retail trade	121,886

Open in organization search

Sources

[1][Official]「ハンズクラブアプリ」への不正アクセスによる個人情報漏洩に関するお詫びとお知らせHands · 2025-01-27