Sagawa: unauthorized logins to Smart Club
From 17:22 on 15 October to 12:00 on 16 October, IDs and passwords apparently obtained by a third party were used to log in to Smart Club accounts. The attacking IP addresses were blocked, possibly affected members were contacted, and two-step verification was made mandatory for My Page. No impact on servers or business systems, or leakage of card or bank information, was confirmed. No affected count was published.
Disclosed
2025-10-15
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started, Disclosed 2025-10-15
- 1 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Service outage]
- Entry point
- Stolen credentials
Data exposed or at risk
–
Services hit
Organizations involved
[Breached][Moderate]Kyoto, Kyoto, MinamiTransport and postal services
Sagawa Express Co., Ltd.
Sources
- [1][Official]【重要なお知らせ】佐川急便スマートクラブ不正アクセスの検知についてSagawa · 2025-10-27
- [2][News]佐川急便/WEBサービスで不正アクセス検知。顧客アカウントに侵入かLNEWS · 2025-10-16
- [3][News]佐川急便/2段階認証が必須化、WEBサービスの不正アクセスに続報LNEWS · 2025-10-27