Matsuya Foods: Data leak affects 2,377,127 online-service users

Unauthorized access to the systems managing the Matsuya official app exposed information on app registrants and users of online ordering services. The leak involved 2,000 app registrants, with the total potentially reaching 3,000.

• App registrant information: Member ID, prefecture, name, phone number, date of birth, email address, encrypted password and Matsuya points.
• Online ordering service user information: Member ID, delivery address, name, phone number and Matsuya points.
• Payment information: Matsuya Foods does not hold credit card information.

Information on users of Matsuben Net, mobile ordering and Matsuben Delivery totaled 2,377,127 records. The exposed data includes contact details and addresses, while app registrant information also includes encrypted passwords, prompting caution over impersonation and suspicious communications.

Matsuya Foods has confirmed unauthorized access, but the cause and details of how the systems were breached have not been established. The company is working with relevant parties to restore the systems as quickly as possible.

• Investigation and reporting: Matsuya Foods is taking necessary steps, including reporting the incident to the Personal Information Protection Commission.
• Customer response: The company will contact affected customers in sequence.
• Compensation: Matsuya Foods plans to compensate app members for the period during which the service is unavailable.

The scope of the leaked information and the circumstances of the unauthorized access are expected to become clearer as the investigation proceeds. The disclosure did not specify the impact on earnings from system restoration or compensation.

Matsuya Foods is urging users to stay alert because leaked information could be exploited for impersonation and other scams. The company says it will not ask for passwords or credit card information by email or phone.

• User precautions: Treat suspicious emails, SMS messages and phone calls with caution.
• Contact desk: A dedicated contact point for personal information inquiries has been set up. Phone service is available from 10 a.m. to 4 p.m. on weekdays and is closed on weekends.

Users should also be wary of fake messages using their contact details and attempts to obtain passwords reused on other services. Investors will be watching for updates on the investigation and system restoration, as well as progress in notifying and compensating affected users.