murauchi.com: unauthorized access
Long-running online retailer murauchi.com had a system failure early on 15 July, and traces of unauthorized access were found during recovery on 16 July. Attackers used a vulnerability in part of its web system as a starting point and accessed several systems. Its second report on 15 September said the forensic investigation confirmed the leak of 7,716,811 records with names, addresses, phone numbers, emails, birth dates and genders. Card data and passwords were not included.
Disclosed
2026-07-24
Organizations involved
1
Leaked or at risk
7.7M
7,716,811
Downtime
Unknown
Timeline
- Started 2026-07-15
- Detected 2026-07-16
- Disclosed 2026-07-24
- 9 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak][Service outage]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, HachiojiWholesale and retail trade7,716,811 leaked
murauchi.com Corporation
Sources
- [1][News]ムラウチドットコム、不正アクセスにより約771万件の個人情報漏えいINTERNET Watch · 2026-09-16
- [2][News]ムラウチドットコムから顧客情報約771万件の漏えい 氏名や住所、電話番号などITmedia NEWS · 2026-09-17