Science & Tech · Cybersecurity · 10 hrs ago
Aena says customer data for up to 817,215 members may have been accessed
Aena, a discount retailer in Japan, said someone accessed its online shopping app without permission.
The incident may affect up to 817,215 members, whose personal details appeared on their account pages.
The information may include names, addresses, phone numbers and email addresses, as well as the last four digits and expiry dates of stored cards.
Aena said full card numbers, security codes and login passwords were not stored on its servers or exposed.
The company has not confirmed any misuse of member information or further harm.
It blocked access to the online shopping service and is investigating the cause while working on measures to prevent a repeat.
Aena is contacting potentially affected members by email and warns them not to click links in messages from unfamiliar senders.
Aena said unauthorized access may have exposed the member-page information of up to 817,215 users of its online shopping app.
The potentially accessed information includes names, addresses, contact details and some information about registered credit cards.
The company said full card numbers and security codes were not stored on its servers and were not exposed.
Aena said it had blocked access and was investigating and working on measures to prevent a recurrence.
The company said it had not confirmed misuse of member information or other harm.
- Who
- Aena, a Japanese discount retailer.
- What
- Unauthorized access may have exposed member-page information for up to 817,215 app members.
- When
- The access was detected on October 13, 2026; Aena announced it on October 14.
- Where
- Aena’s online shopping app and member pages.
- Why
- The reason for the unauthorized access was not stated; the cause was under investigation.
This story does not have two clearly opposing sides.
Aena’s logs showed that member pages were being accessed without authorization.
Aena announced the incident and said it had blocked access and was working on preventive measures.
- Potentially affected members
- Up to 817,215
- Detection time
- October 13, 2026, at 5:58 a.m.
- Potentially accessed card details
- Last four digits, expiry date and cardholder name
- Not exposed
- Full card numbers and security codes
- Company
- Aena, based in Setagaya, Tokyo
3 sources
What people are saying
Do not click URLs in the body of emails from senders you do not recognize.