Nojima: about 7 million online shopping and phone buyback records leaked, including encrypted passwords

On 1 November, Nojima detected unauthorized access to its online shop member management system and confirmed data had leaked that day. It disclosed the incident on 2 November. [1]

The announced scope is about 7 million member records across Nojima Online and its used smartphone buyback site: names and their readings, dates of birth, gender, postcodes, addresses, phone numbers, login IDs, encrypted passwords and email addresses. Former members are excluded. The company has not stated a deduplicated number of people. [1]

Neither site stores card details. The cause, misuse of the information and any further harm remain under investigation. [1]

The company blocked outside access, strengthened monitoring and suspended both sites. It consulted police and was preparing reports to the Personal Information Protection Commission and other authorities. A reopening date will follow its safety checks. [1]