[Contained][Severity: Critical][Intrusion]

BOOKOFF: unauthorized access to the member system

Attackers accessed the member system of BOOKOFF Corporation and took member data from 4 to 6 October; the company confirmed it on 6 October. 6,427,735 app, online store and web member records (6,383,279 people, including former members) are affected: names, birth dates, gender, occupations, email addresses, phone numbers, addresses, password hashes and point card numbers. Payment data and ID document images are not included.

Disclosed

2026-10-09

Organizations involved

Leaked or at risk

6.4M

6,427,735

Downtime

Unknown

Timeline

Started 2026-10-04
Detected 2026-10-06
Disclosed 2026-10-09
5 days

Attack or cause

Method: [Intrusion]
Impact: [Data leak]
Entry point: Unknown

Data exposed or at risk

[Name][Date of birth][Gender][Employment][E-mail address][Phone number][Postal address][Passwords]

Organizations involved

[Breached][Critical]Kanagawa, Sagamihara, MinamiWholesale and retail trade
BOOKOFF Corporation

						Note
BOOKOFF Corporation	[Breached]	[Critical]	Kanagawa, Sagamihara, Minami	Wholesale and retail trade	Unknown

Open in organization search

Sources

[1][Official]（訂正）不正アクセスによる個人情報漏えいに関するお詫びとお知らせ(第 2 報) の一部訂正についてBOOKOFF Group Holdings · 2026-10-16