Sagawa: unauthorized access to the parcel tracking service

On September 30 Sagawa Express found unauthorized access to the parcel tracking service on its website and partly restricted access. Its fifth report on October 23 put the personal data that may have leaked at up to about 53.23 million records, counting the same person more than once. Affected are names, addresses and phone numbers of senders and recipients on waybills from June 21 to September 30; names, addresses and phone numbers of customers with freight contracts; and names, addresses, phone numbers, email addresses and member IDs of Smart Club members. Card data and passwords are not included, and no misuse has been found. Removing duplicates continues with an outside firm. Web tracking reopened the same day, while the tracking API, Hikyaku parcel bookings, delivery address changes, Kaishu-kun and some other services stayed stopped. Misato Town and Ogata Village in Akita, which ship hometown tax gifts through Sagawa, said their donors' data may be included. On 26 October Zeria Pharmaceutical said delivery data for its ZERIA ONLINE shop may be included.