Kaikatsu Frontier: unauthorized access to Kaikatsu CLUB and FiT24 member data
Kaikatsu Frontier detected unauthorized server access on 18 January 2025 and began public notices and app restrictions on 20 January. Up to 7,290,087 Kaikatsu CLUB and certain FiT24 member records may have been exposed, including names, genders, addresses, telephone numbers and birth dates. The 17 March investigation report said actual leakage and secondary harm had not been confirmed and that app functions resumed in stages from 19 to 28 February. Payment-card details, email addresses and app passwords were excluded. On December 4, 2025 the company reported that police had announced an arrest concerning the incident.
Disclosed
2025-01-20
Organizations involved
1
Leaked or at risk
7.3M
7,290,087
Downtime
Unknown
Timeline
- Detected 2025-01-18
- Disclosed 2025-01-20
- 2 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Kanagawa, Yokohama, TsuzukiPersonal services and entertainment7,290,087 leaked
Kaikatsu Frontier Inc.
Sources
- [1][Official]不正アクセスの発生及び個人情報漏えいの可能性に関するお知らせ(第五報・過去のお知らせ)Kaikatsu Frontier · 2025-03-17
- [2][Official]本年1月に発生した当社サーバーへの不正アクセスに関する容疑者逮捕の件についてKaikatsu Frontier · 2025-12-04