Valuence Japan: unauthorized access to the online purchase system
On 21 October Valuence Japan, which runs buying services such as Nanboya, said its online purchase system had been accessed by a third party and customer and employee data may have been taken. It detected the access on the 18th, closed the route and restored the service. Phone numbers of up to 1,165 customers who used it from 14 September to the morning of 18 October are affected; for up to 439 of them also names, addresses, birth dates, gender, occupation, email addresses and bank account details, and for 10 images of identity documents. In-store, home-visit and mail-in buying were not affected. It reported the case to the Personal Information Protection Commission and its Privacy Mark body.
Disclosed
2026-10-21
Organizations involved
1
Leaked or at risk
1.2K
1,165
Downtime
Unknown
Timeline
- Detected 2026-10-18
- Disclosed 2026-10-21
- 3 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, MinatoWholesale and retail trade1,165 leaked
Valuence Japan Inc.
Sources
- [1][Official]【お詫び】当社オンライン買取システムへの不正アクセスによる個人情報の漏えいに関するお詫びとお知らせValuence · 2026-10-21