Yakult: Website breach exposes about 40,000 personal records

Unauthorized access to the website resulted in the external disclosure of personal information belonging to customers and other people connected with the company. The current tally is about 40,000 records, and the final number is still being confirmed.

• Inquiry users: Information on users of the general inquiry form included names, addresses, telephone numbers, email addresses and inquiry details.
• School-lunch site members: Information on registrants of "Tanoshii Kyushoku" included names, workplaces and contact details, and email addresses. Registered passwords were included in encrypted form.
• Media representatives: Information on users of the form for media representatives included names, occupations, media outlets, companies or organizations, contact details and inquiry details.
• Employees who handled inquiries: The names of employees who responded to general and media inquiries were also among the leaked information.

The information exposed varied by person and included workplace details and information submitted voluntarily. The key concern for users of websites that handle personal information is that their contact details and inquiry content may have been exposed.

Yakult halted website functions on the day it detected the unauthorized access to prevent the damage from spreading. It is continuing a detailed investigation, has made an initial report to the Personal Information Protection Commission and is consulting with police.

• Limiting further damage: Website functions were halted after the unauthorized access was detected.
• Response to authorities: Yakult made an initial report to the Personal Information Protection Commission and is consulting with police.
• Investigation: The company continues to determine the details and scope of the leak.

Yakult said it does not hold credit card or bank account information on its website. As of the announcement, it had not identified any misuse or secondary harm believed to be related to the incident.

Yakult will continue its investigation and said it would promptly disclose the scope, countermeasures and response for users if new facts emerge.

• Next steps: If the investigation uncovers new facts, Yakult will announce the scope, countermeasures and response for users.

The current leak count is a preliminary figure, and the affected people and information have not yet been fully determined. Potentially affected users should look out for further updates or individual notices from Yakult.