MUJI App Data Breach May Affect Up to 27.26 Million Users
Ryohin Keikaku says leaked data is limited to email addresses, birth dates and gender, and that card details were not exposed.
Ryohin Keikaku, the company behind MUJI, announced on October 30, 2026 that some user information from its official MUJI App may have leaked outside the company following unauthorized external access. According to watch.impress.co.jp, up to about 27.26 million records may be affected.
The company said the potentially exposed data is limited to email addresses, dates of birth and gender. Credit card information, names, addresses and phone numbers are not included. The tally also covers information belonging to users who have since cancelled their membership.
Ryohin Keikaku said it detected the unauthorized access, blocked access to the affected location and applied fixes. As of the announcement, no circulation of the user information on the dark web or damage from misuse had been confirmed.
The company plans to contact affected users in sequence and warned them about possible phishing emails. MUJI App and the MUJI online store are currently operating normally.
Quick answers
What data may have leaked from the MUJI App?
Email addresses, dates of birth and gender. Credit card information, names, addresses and phone numbers are not included.
How many users are affected?
Up to about 27.26 million records may be affected, a figure that includes users who have since cancelled their membership.
Are the MUJI App and online store still working?
Yes. Ryohin Keikaku says both the MUJI App and the MUJI online store are operating normally.