MUJI Card breach may have exposed 1.09 million full card numbers

Ryohin Keikaku, the company behind MUJI, says the attack on its systems also reached MUJI Card numbers it had kept for cardholders who joined before August 2021.

In this brief: 3 sections 2 min read

- About 1.09 million MUJI Cards, including cancelled and expired ones; about 345,000 are still usable.
- Cards issued from August 2021 on are not affected.
- Up to about 27.26 million MUJI app and online store records, including former members.
- MUJI Card: full card number, date of birth and MUJI member ID.
- About 120 cards saved in the app or store: first 6 and last 2 digits plus cardholder name.
- App and store records: email, date of birth, gender; for some, name, address and phone number.
- Review card statements and report unknown charges to Saison Card.
- Saison will reissue a card on request through its Net Answer or Saison Portal service.
- MUJI says it never asks for card details by email or phone; treat such messages as scams.

Read full analysis on ryohin-keikaku.jp

Useful?