MoonStar: unauthorized access to system servers
On 26 March, shoe maker MoonStar disclosed suspected unauthorized access to some servers but found no leak at the time. Around 20 September a customer asked about a spoofed email in its name that contained past order details, and it concluded customer data had been stolen. Its third report on 15 October said personal data most likely leaked through a system server between 14 and 19 May, covering up to 593,000 people who used its own online stores or its official shops on Rakuten, Amazon and other marketplaces: names, addresses, phone numbers, emails and past orders.
Disclosed
2026-03-26
Organizations involved
1
Leaked or at risk
593K
593,000
Downtime
Unknown
Timeline
- Disclosed 2026-03-26
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Fukuoka, KurumeManufacturing593,000 leaked
MoonStar Company
Sources
- [1][Official]【重要】当社サーバーに対する不正アクセスの疑いに関するお知らせMoonStar Company · 2026-03-26
- [2][Official]【重要】弊社システムサーバーに対する不正アクセスの疑いに関するお知らせ【第2報】MoonStar Company · 2026-10-02
- [3][Official]【重要】弊社システムサーバーに対する不正アクセスの疑いに関するお知らせ【第3報】MoonStar Company · 2026-10-15