Haruyama Holdings: ransomware encrypted several servers, stopping online shops and the point service, and 18,053 personal records may have been viewed

1. 2025-06-26

   It detected unauthorized access to its servers and cut them off from the network. It confirmed ransomware that encrypted several servers and set up a response headquarters. [1] [3]

2. 2025-06-30

   It announced the incident. The point service, online shops and smartphone app became unavailable while stores kept operating as usual. [1] [3] [4]

3. 2025-10-24

   It published its final report. It retired the network device that served as the entry point. [2]

NHK reported that the servers held personal data on several million people, such as phone numbers and addresses. The final report found no trace of outside transfer or secondary harm, but could not rule out viewing, so it notified 18,053 customers, partners and employees. The data is name, postal code, address, phone number and email address, with no card data. [2] [3]