> JapanHacked_
[Contained][Severity: Major][Credential abuse]

Life: automated login attempts on its app may have exposed names, addresses and point balances in 298 accounts

Mass automated login attempts hit the Life supermarket app on 30 October; names, addresses, phone numbers and e-money balances in 298 accounts may have been viewed.

Disclosed

2026-11-02

Organizations involved

1

Leaked or at risk

298

298

Downtime

Unknown

What happened

On 30 October the company detected a surge of traffic to the app and found unauthorized access by mass automated login attempts. It blocked the suspicious sources and reported to the PPC. [1]

Impact

In 298 accounts, names, dates of birth, addresses, postcodes, phone numbers, e-money balances, point card numbers and point balances may have been viewed. LC JCB card numbers did not leak. [1]

The affected point cards were suspended and their holders notified by post. No misuse of points or e-money has been found. [1]

Timeline

  1. Detected 2026-10-30
  2. Disclosed 2026-11-02
  3. 3 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[Name][Date of birth][Postal address][Phone number][Member or customer ID]

Services hit

Organizations involved

Sources

  1. [1][Official]第三者による不正アクセスに伴う個人情報漏えいの可能性に関するお詫びとお知らせLife Corporation · 2026-11-02