FIVE FOXes: its servers may have been hit by ransomware, and personal data of 67,907 customer records and 5,278 employee records may have leaked

1. 2026-07-08

   During a routine security check it found that part of its servers might be infected with ransomware. It stopped the systems and cut the network at once, set up a response headquarters and began an investigation with an outside specialist. It reported to the police and the relevant authorities. [1] [2]

2. 2026-07-14

   It announced the possible ransomware infection (first report). [2]

3. 2026-09-08

   In the second report it announced that personal data might have leaked, and said it would notify the people concerned by letter. [1] [3]

Four sets of data may have leaked. 59,504 records of some VIP and GOLD rank members who registered for the member card between September 2021 and June 2026 (names, addresses, phone numbers, birth dates, sex, registered store, rank, member number). 8,403 records of some customers who contacted customer service between January 2008 and June 2026 (names, addresses, phone numbers). 2,450 records of FIVE FOXes employees, including former ones (names, addresses, phone numbers, birth dates, sex, personnel data). 2,828 records of COMME CA employees, including former ones (the same plus bank account data). [1]

Credit card data and My Number are not handled in this system and were not included. As of September 8, 2026 no misuse had been found. [1]