Starbucks Coffee Japan: an attack on the shift scheduling tool of US vendor Blue Yonder leaked employee IDs of about 72,200 current and former staff

1. 2025-05-29

   US vendor Blue Yonder first told it that a hacker group's attack in December 2024 may have leaked Starbucks employee data. [1] [3]

2. 2025-06-20

   It received data that might have leaked (about 110 people) from Blue Yonder. On July 29 it was told this was only a sample, not the full data. [1]

3. 2025-09-09

   It received the full data from Blue Yonder, confirmed about 31,500 people and reported to the Personal Information Protection Commission on the 12th. [1]

4. 2025-09-19

   It announced the leak affecting about 31,500 people. [1] [3]

5. 2025-10-03

   It announced that about 40,700 more employee IDs had turned up in the data, bringing the total to about 72,200. [2] [4]

Leaked were the employee IDs and kanji names of staff and ex-staff of company and licensed stores (about 31,500), with birth dates, contract start dates and job titles for about 50 of them. About 40,700 further employee IDs alone were found later. Addresses, contact details, pay, bank data, My Numbers and ordinary customer data were not included. No secondary harm has been confirmed. [1] [2] [3]

The company said it understands this to be separate from the ransomware attack on Blue Yonder announced in November 2024. [3]