Seicomart: unauthorized access to the Seicomart app
At Seicomart, a convenience store chain mainly in Hokkaido, one account was found to have had its club card cancelled without authorization on the night of 24 September, and on 28 September it found that a third party may have reached the member data server through the app server. Names, genders, birth dates, addresses, phone numbers and emails of about 570,000 accounts may have been viewed. No passwords leaked and it holds no card data. It cut off the server at 20:00 on 28 September and stopped new sign-ups, My Page logins and other functions.
Disclosed
2026-09-29
Organizations involved
1
Leaked or at risk
570K
570,000
Downtime
Unknown
Timeline
- Started 2026-09-24
- Detected 2026-09-28
- Disclosed 2026-09-29
- 5 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Hokkaido, Sapporo, ChuoWholesale and retail trade570,000 leaked
Seicomart Inc.
Sources
- [1][Official]「セイコーマートアプリ」への不正アクセスによる個人情報流出の可能性に関する お詫びとお知らせSeicomart · 2026-09-29
- [2][News]セイコーマート、不正アクセスで約57万アカウントの会員情報漏えいの可能性INTERNET Watch · 2026-09-29