Science & Tech · Cybersecurity · 6 hrs ago
And ST Holdings says customer data may have leaked in cyberattack
And ST Holdings, a Japanese apparel group that runs brands including Global Work, says customer data may have been exposed in a cyberattack.
The company detected unauthorized access to several work servers on October 22 and isolated them.
About 2.5 million customer records may have leaked, including names, addresses, phone numbers, email addresses and membership IDs.
Information on about 10,000 business partners may also be affected, and the company is still checking the scope of any employee data exposure.
Payment card details were not included, and the company has not confirmed any misuse of the information.
The attack did not affect the and ST online store, but customers cannot use membership points in stores or online.
The company is contacting affected customers and partners and has reported the incident to police and Japan’s Personal Information Protection Commission.
And ST Holdings said about 2.5 million customer records may have been exposed in a cyberattack on its business servers.
The potentially affected customer information includes names, birth dates, addresses, phone numbers, email addresses and member IDs.
About 10,000 records relating to business partners may also have been exposed, and the company is investigating whether employee information was affected.
The company said payment information such as credit card details was not included, and no misuse of the information had been confirmed.
Its online store was not affected, but members could not use their points in stores or online.
- Who
- And ST Holdings, a Japanese apparel company, said customer and business-partner information may have been exposed.
- What
- Unauthorized access to company servers may have exposed about 2.5 million customer records and about 10,000 business-partner records.
- When
- The intrusion was detected on October 22, 2026. The company announced the possible leak on October 23.
- Where
- On several of the company’s internal business servers. The sources do not state their physical location.
- Why
- The sources do not state the attackers’ motive.
This story does not have two clearly opposing sides.
Unauthorized access began on several And ST Holdings servers, according to the company’s announcement.
The company detected unauthorized activity and isolated the affected servers.
The company said it had blocked the access route and stopped its internal business systems.
The company consulted police and reported the incident to Japan’s Personal Information Protection Commission.
- Potentially affected customers
- About 2.5 million
- Potentially affected business-partner records
- About 10,000
- Information potentially exposed
- Names, birth dates, gender, addresses, phone numbers, email addresses and member IDs
- Payment information
- Credit card and other payment information was not included
- Online store
- And ST was not affected by the unauthorized access