United Super Markets Holdings: intrusion into Scan&Go ignica may have exposed names and emails of 64,003 accounts
An intrusion into the Scan&Go ignica shopping app’s system may have exposed the names and emails of 64,003 of about 2.4 million accounts.
Disclosed
2026-11-12
Organizations involved
1
Leaked or at risk
64K
64,003
Downtime
Unknown
Accounts affected or at risk
64K
64,003
What happened
United Super Markets Holdings Inc. said on 12 November that an outsider accessed the system behind Scan&Go ignica, its app for paying without a checkout, and that the system held a file with some users’ personal data. Theft has not been confirmed but cannot be ruled out. Nikkei reported that the intrusion was found on 14 October. [1] [2]
The file covers 64,003 of about 2.4 million accounts: the name and email entered at sign-up. Card data, addresses, phones and birth dates are not included. Affected users are told by email and in the app; no misuse has been found. [1]
Timeline
- Detected 2026-10-14
- Disclosed 2026-11-12
- 29 days
Attack or cause
- Method
- [Unknown]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Major]Tokyo, ChiyodaWholesale and retail trade64,003 leaked
United Super Markets Holdings Inc.
Sources
- [1][Official]不正アクセスによる個人情報流出の可能性に関するお詫びとお知らせUnited Super Markets Holdings Inc. · 2026-11-12
- [2][News]マルエツなど運営のUSMH、個人情報6万件漏洩か 不正アクセスでNikkei · 2026-11-12