> JapanHacked_
[Investigating][Severity: Critical][Intrusion]

MoonStar: unauthorized access to system servers

On 26 March, shoe maker MoonStar disclosed suspected unauthorized access to some servers but found no leak at the time. Around 20 September a customer asked about a spoofed email in its name that contained past order details, and it concluded customer data had been stolen. Its third report on 15 October said personal data most likely leaked through a system server between 14 and 19 May, covering up to 593,000 people who used its own online stores or its official shops on Rakuten, Amazon and other marketplaces: names, addresses, phone numbers, emails and past orders.

Disclosed

2026-03-26

Organizations involved

1

Leaked or at risk

593K

593,000

Downtime

Unknown

Timeline

  1. Disclosed 2026-03-26
  2. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address][Purchase history]

Organizations involved

Open in organization search

Sources

  1. [1][Official]【重要】当社サーバーに対する不正アクセスの疑いに関するお知らせMoonStar Company · 2026-03-26
  2. [2][Official]【重要】弊社システムサーバーに対する不正アクセスの疑いに関するお知らせ【第2報】MoonStar Company · 2026-10-02
  3. [3][Official]【重要】弊社システムサーバーに対する不正アクセスの疑いに関するお知らせ【第3報】MoonStar Company · 2026-10-15