Seiyu: an attack on the shift scheduling tool of US vendor Blue Yonder leaked employee IDs, names and birth dates of 30,508 current and former staff
An attack in October 2024 on the shift tool of vendor Blue Yonder leaked data on 30,508 current and former Seiyu staff stored there.
Disclosed
2025-10-30
Organizations involved
1
Leaked or at risk
30.5K
30,508
Downtime
Unknown
What happened
Impact
The affected are 30,508 current and former Seiyu staff whose data was stored on Blue Yonder's systems during the attack period (provisional, as of October 28, 2025). Employee IDs and kanji names of all 30,508, birth dates of 26,353, and start dates, employment types and attendance codes of all 30,508 leaked, along with initial passwords of 7 people. Ordinary customer data was not included. No secondary harm has been confirmed. [1] [2]
Starbucks Coffee Japan has also announced an employee data leak involving the same Blue Yonder tool. [2]
Timeline
- Started 2024-10-15
- Disclosed 2025-10-30
- 380 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Supply chain
Organizations involved
[Through a supplier][Major]Tokyo, MusashinoWholesale and retail trade30,508 leaked
Seiyu Co., Ltd.
Sources
- [1][Official]Blue Yonder 社の提供サービスへの不正アクセスによる西友従業員の個人情報漏洩についてSeiyu Co., Ltd. and Trial Holdings Inc. · 2025-10-30
- [2][News]Blue Yonder社のシフト作成ツールへの不正アクセスで西友従業員の個人情報が漏えいScanNetSecurity · 2025-11-17 08:05