BTCBOX: documents shared with a partner became viewable by third parties and included 39 customers' personal data; all services were suspended and the Kanto Local Finance Bureau ordered a report

1. 2026-01-15

   While working with an outside partner it shared documents, and it confirmed that the way the partner handled them left them viewable by third parties. It contacted the partner immediately and asked for the data to be deleted. [1]

2. 2026-02-05

   It received a report order from the Kanto Local Finance Bureau under the Payment Services Act. To put safety first, it has temporarily suspended all services. [1] [2]

The documents contained names, phone numbers and email addresses of 39 customers. Customers whose data may have been viewed were contacted individually, and the company is verifying that no viewable personal data remains. No unauthorized outflow of crypto assets or damage to customer assets has been confirmed. [1]

It says it will announce when services resume once the verification is complete. [1]