> JapanHacked_
[Contained][Severity: Major][Intrusion]

Seiyu: an attack on the shift scheduling tool of US vendor Blue Yonder leaked employee IDs, names and birth dates of 30,508 current and former staff

An attack in October 2024 on the shift tool of vendor Blue Yonder leaked data on 30,508 current and former Seiyu staff stored there.

Disclosed

2025-10-30

Organizations involved

1

Leaked or at risk

30.5K

30,508

Downtime

Unknown

What happened

  1. Blue Yonder was hit by an external cyberattack. The attack period ran to October 24. [1]

  2. Seiyu and Trial Holdings announced that employee data had leaked from Blue Yonder's shift scheduling tool "Work Force Management". [1] [2]

Impact

The affected are 30,508 current and former Seiyu staff whose data was stored on Blue Yonder's systems during the attack period (provisional, as of October 28, 2025). Employee IDs and kanji names of all 30,508, birth dates of 26,353, and start dates, employment types and attendance codes of all 30,508 leaked, along with initial passwords of 7 people. Ordinary customer data was not included. No secondary harm has been confirmed. [1] [2]

Starbucks Coffee Japan has also announced an employee data leak involving the same Blue Yonder tool. [2]

Timeline

  1. Started 2024-10-15
  2. Disclosed 2025-10-30
  3. 380 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Supplier

Data exposed or at risk

[Name][Date of birth][Employment]

Supply chain

[Breached]

Organizations listed on this site
1

Organizations involved

Open in organization search

Sources

  1. [1][Official]Blue Yonder 社の提供サービスへの不正アクセスによる西友従業員の個人情報漏洩についてSeiyu Co., Ltd. and Trial Holdings Inc. · 2025-10-30
  2. [2][News]Blue Yonder社のシフト作成ツールへの不正アクセスで西友従業員の個人情報が漏えいScanNetSecurity · 2025-11-17 08:05