Breaches and incidents
Tokyo Metro (Japan): Metpo loyalty programme accessed, about 59,000 email addresses exposed
Tokyo Metro announced on 27 Sep that an unauthorized third party accessed the email addresses of about 59,000 customers enrolled in its Metpo loyalty...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Tokyo Metro announced on 27 Sep that an unauthorized third party accessed the email addresses of about 59,000 customers enrolled in its Metpo loyalty programme; it said “Only email addresses were taken” (per Infosecurity Magazine) and “No other personal information was accessed” (per Security Affairs).
- Root cause: not disclosed; Tokyo Metro said it “identified the suspected entry point”.
- No attacker named.
- Tokyo Metro took measures to prevent recurrence and warned customers to watch for phishing. Infosecurity reported it alongside the Keio ransomware attack (covered separately) as weekend attacks on Japanese railway operators.