About 1.09 Million MUJI Credit Card Records May Have Leaked; Vietnam Stores Remain Open
Ryohin Keikaku discovered a system security vulnerability on November 12. About 1.09 million MUJI Card credit card records and data from about 440,000 cash-on-delivery customers may have been exposed. Its 20 stores in Vietnam remain open, and there is no information yet on whether customers there were affected.
Japanese retailer Ryohin Keikaku discovered a security vulnerability in its systems on November 12 that may have exposed customer data in a cyberattack. Chairman Satoshi Shimizu said in Tokyo that about 1.09 million credit card records belonging to customers who registered for a MUJI Card before July 2021 may have been affected.
The company said the records included complete 16-digit card numbers for expired, canceled and still-valid credit cards. Data from about 440,000 customers who chose cash on delivery may also have been exposed. Satoshi Shimizu acknowledged that card information that should have been deleted remained in the company’s database and said it would establish a system to avoid retaining unnecessary data.
Ryohin Keikaku is investigating whether the information has been misused. If it confirms that customers have suffered harm, it will contact those affected individually. The company also plans to cover the cost of reissuing credit cards that may have been affected. Earlier, its online store faced an attack in which login credentials obtained from other data breaches were used to attempt to sign in. On October 30, the company said unauthorized access to the MUJI app may have exposed up to 27.26 million customer records. Its official online store and some app functions have been suspended, and a date for reopening the online store has not been set.
A corner of a MUJI store in Vietnam.（VietVance）
MUJI entered the Vietnamese market in November 2020, opening its first store in Ho Chi Minh City. It now has 20 stores in Vietnam. A local reporter observed that the stores were operating normally. There is no information yet on whether the data breach has affected MUJI customers in Vietnam.
Source: VietVance
