Rakuten Books Network: intruders reach work PCs holding 33,333 Rakuten Books delivery addresses

On 21 August Rakuten Books Network, a Rakuten Group subsidiary in book distribution, said outsiders had gained unauthorized access to some of its work PCs. It detected the access on 5 April, cut the PCs off the network and investigated with outside specialists. The PCs held 33,333 customer records from Rakuten Books deliveries (names, postal codes, addresses and phone numbers from orders placed on 18–19 May 2022 and 19–21 December 2023), plus 2,101 business contacts and 339 employees. No card or other financial data was included. At disclosure no leak of the data and no secondary harm had been confirmed. The entry route was not disclosed. The company reported to the Personal Information Protection Commission and notified those affected by email.