[Investigating][Severity: Critical][Intrusion]

WILLs: NetMile breach may expose names and email addresses of up to about 5.49 million people

Data of up to about 5.49 million people, including former members, may have leaked from WILLs' NetMile point exchange site: names, email addresses and exchange records.

Disclosed

2026-11-02 14:00

Organizations involved

Leaked or at risk

5.5M

5,490,000

Downtime

Unknown

What happened

2026-11-02 14:00
WILLs disclosed to the Tokyo Stock Exchange that NetMile had been accessed without authorization and member data may have leaked. [1]

Impact

Up to about 5,490,000 people, including former members, are affected: names, email addresses and point exchange records. Card and My Number data are not included. [1]

Response

NetMile and Sugutama were suspended to prevent secondary harm and as a security measure. The notice does not confirm a separate intrusion into Sugutama. The company expects little effect on its earnings. [1]

Timeline

Disclosed 2026-11-02
1 days

Attack or cause

Method: [Intrusion]
Impact: [Data leak][Service outage]
Entry point: Unknown

Data exposed or at risk

[Name][E-mail address][Purchase history]

Services hit

[Breached][Critical]
NetMile
[Precautionary halt][Minor]
Sugutama
Suspended to prevent secondary harm and as a security measure; the notice does not confirm a separate intrusion into Sugutama.

Service	Role	Impact level	Note
NetMile	[Breached]	[Critical]
Sugutama	[Precautionary halt]	[Minor]	Suspended to prevent secondary harm and as a security measure; the notice does not confirm a separate intrusion into Sugutama.

Open in service search

Organizations involved

[Breached][Critical]Tokyo, MinatoInformation and communications5,490,000 leaked
WILLs Inc.

						Note
WILLs Inc.	[Breached]	[Critical]	Tokyo, Minato	Information and communications	5,490,000

Sources

[1][Official]「ネットマイル」における不正アクセスによる個人情報漏えいの可能性に関するお知らせWILLs · 2026-11-02 14:00