> JapanHacked_
[Investigating][Severity: Major][Unknown]

United Super Markets Holdings: intrusion into Scan&Go ignica may have exposed names and emails of 64,003 accounts

An intrusion into the Scan&Go ignica shopping app’s system may have exposed the names and emails of 64,003 of about 2.4 million accounts.

Disclosed

2026-11-12

Organizations involved

1

Leaked or at risk

64K

64,003

Downtime

Unknown

Accounts affected or at risk

64K

64,003

What happened

United Super Markets Holdings Inc. said on 12 November that an outsider accessed the system behind Scan&Go ignica, its app for paying without a checkout, and that the system held a file with some users’ personal data. Theft has not been confirmed but cannot be ruled out. Nikkei reported that the intrusion was found on 14 October. [1] [2]

The file covers 64,003 of about 2.4 million accounts: the name and email entered at sign-up. Card data, addresses, phones and birth dates are not included. Affected users are told by email and in the app; no misuse has been found. [1]

Timeline

  1. Detected 2026-10-14
  2. Disclosed 2026-11-12
  3. 29 days

Attack or cause

Method
[Unknown]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address]

Services hit

Organizations involved

Sources

  1. [1][Official]不正アクセスによる個人情報流出の可能性に関するお詫びとお知らせUnited Super Markets Holdings Inc. · 2026-11-12
  2. [2][News]マルエツなど運営のUSMH、個人情報6万件漏洩か 不正アクセスでNikkei · 2026-11-12