> JapanHacked_
[Contained][Severity: Moderate][Credential abuse]

Sagawa: unauthorized logins to Smart Club

From 17:22 on 15 October to 12:00 on 16 October, IDs and passwords apparently obtained by a third party were used to log in to Smart Club accounts. The attacking IP addresses were blocked, possibly affected members were contacted, and two-step verification was made mandatory for My Page. No impact on servers or business systems, or leakage of card or bank information, was confirmed. No affected count was published.

Disclosed

2025-10-15

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Started, Disclosed 2025-10-15
  2. 1 days

Attack or cause

Method
[Credential abuse]
Impact
[Service outage]
Entry point
Stolen credentials

Data exposed or at risk

–

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]【重要なお知らせ】佐川急便スマートクラブ不正アクセスの検知についてSagawa · 2025-10-27
  2. [2][News]佐川急便/WEBサービスで不正アクセス検知。顧客アカウントに侵入かLNEWS · 2025-10-16
  3. [3][News]佐川急便/2段階認証が必須化、WEBサービスの不正アクセスに続報LNEWS · 2025-10-27