> JapanHacked_
[Investigating][Severity: Critical][Unknown]

Matsuya Foods: unauthorized access to its official app management system leaks about 2.38 million personal records

The management system of Matsuya Foods Holdings' official app was accessed without authorization, and 2,377,127 records of Matsuben Net and other users leaked.

Disclosed

2026-10-29

Organizations involved

1

Leaked or at risk

2.4M

2,377,127

Downtime

Unknown

What happened

  1. Unauthorized access was detected at night, and the official app and website were taken offline. [3] [2]

  2. The company disclosed that personal data left the app management system. [1] [2]

Impact

Group
Records
Data
Users of Matsuben Net, Matsuya Mobile Order and Matsuben Delivery
2,377,127
Member ID, name, phone, delivery address, Matsuya points
App members
2,000 (up to 3,000)
Birth date, email, encrypted password and more
[1] [2]

It holds no card data, which is not affected. [1] [2]

Timeline

  1. Detected 2026-10-28
  2. Disclosed 2026-10-29
  3. 1 days

Attack or cause

Method
[Unknown]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

[Name][Phone number][Postal address][Date of birth][E-mail address][Passwords]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]松屋公式アプリ（松弁ネット・モバイルオーダー・松弁デリバリー）管理システムに対する第三者からの不正アクセスによる個人情報漏えいに関するお詫びとお知らせMatsuya Foods Holdings · 2026-10-30
  2. [2][News]松屋、237万件超の個人情報が漏えい　「氏名」「電話番号」「住所」など流出、公式アプリへの不正アクセスでITmedia Business Online · 2026-10-30
  3. [3][News]松屋フーズ 不正アクセス検知 HPとアプリを停止NHK · 2026-10-29