Matsuya Foods halts app and website after data breach affecting 2.38 million
The company said unauthorized access to the Matsuya official app's management system was detected on October 28, with 2,000 app registrations and 2,377,127 other user records exposed.
Matsuya Foods Holdings said on October 30 that personal information had leaked following unauthorized third-party access to the management system of the Matsuya official app, according to internet.watch.impress.co.jp. The company has suspended the official app and related services, including its website.
The unauthorized access was identified on October 28. Two sets of data were confirmed exposed: records for 2,000 people registered with the Matsuya official app, possibly up to 3,000, and 2,377,127 records belonging to users of the Matsubento Net, mobile order and Matsubento Delivery services.
For app registrants, the leaked data includes membership ID, prefecture, name, phone number, date of birth, email address, encrypted password and Matsuya points. For users of the three ordering and delivery services, it includes membership ID, delivery address, name, phone number and Matsuya points.
The company said it does not hold credit card information. It added that the cause and the sequence of events are still under investigation.
Matsuya Foods said it is working to restore its systems and will contact affected individuals directly. It also urged customers to be wary of suspicious emails, SMS messages and phone calls.
Quick answers
How many people were affected by the Matsuya Foods data breach?
The company confirmed leaks for 2,000 Matsuya official app registrants, possibly up to 3,000, and 2,377,127 users of Matsubento Net, mobile order and Matsubento Delivery.
Was credit card information leaked?
Matsuya Foods Holdings said it does not hold credit card information.
Which Matsuya services are affected?
The official app and related services including the website have been suspended while the company works on system recovery.