> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Kaikatsu Frontier: unauthorized access to Kaikatsu CLUB and FiT24 member data

Kaikatsu Frontier detected unauthorized server access on 18 January 2025 and began public notices and app restrictions on 20 January. Up to 7,290,087 Kaikatsu CLUB and certain FiT24 member records may have been exposed, including names, genders, addresses, telephone numbers and birth dates. The 17 March investigation report said actual leakage and secondary harm had not been confirmed and that app functions resumed in stages from 19 to 28 February. Payment-card details, email addresses and app passwords were excluded. On December 4, 2025 the company reported that police had announced an arrest concerning the incident.

Disclosed

2025-01-20

Organizations involved

1

Leaked or at risk

7.3M

7,290,087

Downtime

Unknown

Timeline

  1. Detected 2025-01-18
  2. Disclosed 2025-01-20
  3. 2 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

[Name][Gender][Postal address][Phone number][Date of birth]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスの発生及び個人情報漏えいの可能性に関するお知らせ(第五報・過去のお知らせ)Kaikatsu Frontier · 2025-03-17
  2. [2][Official]本年1月に発生した当社サーバーへの不正アクセスに関する容疑者逮捕の件についてKaikatsu Frontier · 2025-12-04