Lawson: unauthorized access to Lawson ID and Lawson app pre-orders

Lawson found on 7 October that Lawson ID had been accessed without authorization from 12 to 14 September and Lawson app pre-orders on 17 September. Email addresses and names of 2,155,345 Lawson ID records leaked, plus gender, phone numbers and addresses where users had entered them. For pre-orders, names, phone numbers and partial card numbers of 26 records leaked. The access went through the mechanism that shows users their own data in the app. All app reservation functions resumed on October 19 after security measures.