Cox: ransomware encrypted the servers of a watch repair contractor; names of customers who asked Don Quijote and group stores for repairs may have leaked

1. 2026-09-15

   Cox noticed a possible attack on its server. On checking, the server was encrypted and unreadable, so outside connections were cut. [1]

2. 2026-09-25

   Cox reported to the Don Quijote group. [1]

3. 2026-10-28

   Don Quijote, Nagasakiya, Tachibana Department Store and UD Retail disclosed it. [1]

Names, and some addresses and phone numbers, of customers who asked the four companies' stores to repair a watch since September 2025. The number has not been published. No leak has been confirmed, but the encrypted server has not yet been restored, so one cannot be ruled out. [1]

The companies and Cox reported to the Personal Information Protection Commission, and Cox has outside experts investigating. Data handling, including at contractors, will be reviewed. [1]