Breaches and incidents
Matsuya Foods Holdings: Matsuya app management system breached, 2.38M delivery/order records leaked
The company said a third party gained unauthorized access to the management system of the Matsuya official app (Matsuben Net, Mobile Order, Matsuben...
- Disclosed
- Verification
- Checked against a primary source
What happened
- The company said a third party gained unauthorized access to the management system of the Matsuya official app (Matsuben Net, Mobile Order, Matsuben Delivery), leaking app member data (member ID, prefecture, name, phone, date of birth, email, encrypted password, Matsuya points) for 2,000 records (“possibly up to 3,000”) and delivery/order data (member ID, delivery address, name, phone, points) for 2,377,127 records; it holds no card data.
- Root cause: not disclosed; the company said the cause and how the access became possible are under investigation (International Press reported the intrusion was detected around 9 pm the day before its 29 Oct article).
- No attacker named.
- The app, website ordering and coupons were suspended with no restoration date; the company is reporting to the PPC, will contact affected customers, and announced compensation (rank upgrades, free MATSUYA PASS period, ticket-machine coupons).