Sagawa Express says up to 53.23 million records may have leaked
The parcel inquiry service is back online, but the inquiry API and several other Sagawa Express services remain suspended.
Sagawa Express Co., Ltd. said on October 23, 2026 that up to about 53.23 million personal information records may have leaked through unauthorized access to its Parcel Inquiry Service, and that it has restored the service on its website, according to internet.watch.impress.co.jp.
The potentially exposed data covers shipping label information for parcels handled between June 21 and September 30, 2026, including sender and recipient names, addresses and phone numbers.
The company also said contract customer information for fare agreement users, such as name, address and phone number, may have leaked, along with Smart Club membership data including name, address, phone number, email address and member ID.
Sagawa Express stated that credit card information and passwords were not included in the possible leak, and that no secondary harm from misuse of the data has been confirmed.
Other services still down
The Parcel Inquiry Service has resumed on the company's website, but the parcel inquiry API and several other services remain suspended, including Hikyaku Takkyubin reception, delivery address changes, Hikyaku Oufuku-bin and the Kaishu-kun pickup service.
According to the background provided, the company confirmed unauthorized access to the service on September 30, 2026, restricted some access and began an investigation, then announced on October 1, 2026 that personal information may have leaked.
Quick answers
How many records may have leaked in the Sagawa Express breach?
Sagawa Express said up to about 53.23 million personal information records may have leaked.
Is the Sagawa Express parcel inquiry service back online?
Yes. The Parcel Inquiry Service resumed on the company's website, but the inquiry API and several other services remain suspended.
What data may have been exposed?
Shipping label data for parcels from June 21 to September 30, 2026 (names, addresses, phone numbers), fare agreement customer details and Smart Club member information including email addresses and member IDs.