Science & Tech · Cybersecurity · 2 hrs ago
Yamato Transport says data from about 5.31 million records leaked
Yamato Transport disclosed a data leak from its Kuroneko deferred-payment service in Japan.
The exposed information covers about 5.31 million records, including customer names, addresses and phone numbers.
Some 490,000 records also included email addresses, while information about delivery recipients and some merchants was exposed too.
The service lets people pay for online purchases after receiving their goods.
Credit card and password details were not leaked, and Yamato says it has not confirmed any misuse of the exposed data.
The company stopped the service after discovering unauthorised access in late September and restarted it on the 9th.
Yamato will contact affected customers individually as it identifies them.
Yamato Transport said information from about 5.31 million records was leaked after unauthorized access to its Kuroneko post-payment service.
The leaked information included customer names, addresses and phone numbers, as well as delivery-recipient and some merchant information.
About 490,000 records included email addresses.
The company said credit card and password information was not leaked.
It said it had found no cases of misuse of the leaked information and would contact affected customers individually.
- Who
- Yamato Transport and people whose information was held by its Kuroneko post-payment service.
- What
- Information from about 5.31 million records was leaked after unauthorized access.
- When
- Announced on October 16, 2026. The affected service was used between October 2018 and September 2026.
- Where
- The Kuroneko post-payment service, used to pay for goods after purchasing them from online shopping sites.
- Why
- Unauthorized access occurred. The sources do not state how or why it happened.
This story does not have two clearly opposing sides.
Yamato Transport discovered unauthorized access and stopped the service.
The service resumed.
Yamato Transport announced that information from about 5.31 million records had leaked.
- Records affected
- About 5.31 million
- Records with email addresses
- About 490,000
- Customer information
- About 5.26 million records, including names, addresses and phone numbers
- Delivery-recipient information
- About 50,000 records
- Merchant information
- About 4,100 records
- Affected service
- Kuroneko post-payment service