Saga Hirakawaya: card data leaked from its online shop

On 15 June, Saga Hirakawaya, a tofu maker in Takeo, Saga, said unauthorized access to its online shop may have leaked 73,213 personal records and 6,303 card records. A card company alerted it on 9 March and it stopped card payments; the investigation found a vulnerability in part of the system was used to tamper with the payment application. Card numbers, expiry dates, security codes and more of 5,783 people who paid by card from 21 March 2025 to 10 March 2026, and names, birth dates, addresses, phone numbers and emails of 30,170 people who entered customer data since 6 April 2021, are affected. Some cards may have been misused.