Science & Tech · Cybersecurity · 20 hrs ago
Muji says up to 27.26 million customer records may have leaked
Muji operator Ryohin Keikaku says unauthorized access to its official app may have exposed customer information.
The company says up to 27.26 million records may be affected, including records belonging to people who have left the service.
The information at risk includes email addresses, birth dates and gender.
Credit card details, names, home addresses and phone numbers were not included, the company says.
It detected the access, blocked it and applied a fix; it has not confirmed any leak to the dark web or harm from misuse.
The app and Muji's online store remain available, and the company will contact potentially affected users.
Muji is warning users to watch for impersonation emails and says it will strengthen security and monitoring with its partners.
Ryohin Keikaku, the operator of Muji, said information from up to about 27.26 million customer records may have leaked through unauthorized access to its official app.
The information potentially exposed includes email addresses, dates of birth and gender.
Credit card details, names, addresses and phone numbers were not included.
The figure includes information belonging to people who had closed their accounts.
The company said it had blocked access to the affected area and applied a fix, and had not confirmed any information being leaked online or misuse causing harm.
- Who
- Ryohin Keikaku, the operator of Muji, and users of its official app.
- What
- Information from up to about 27.26 million customer records may have leaked after unauthorized access.
- When
- The company announced the possible leak on October 30, 2026.
- Where
- The incident involved the MUJI app. The company is based in Japan.
- Why
- The company said it detected unauthorized access. The method and motive are not stated.
This story does not have two clearly opposing sides.
Ryohin Keikaku detected unauthorized access and blocked access to the affected area, then applied a fix.
The company announced that information from up to about 27.26 million customer records may have leaked.
- Maximum records affected
- About 27.26 million
- Potentially exposed information
- Email addresses, dates of birth and gender
- Information not included
- Credit card details, names, addresses and phone numbers
- Affected accounts
- Includes people who had closed their accounts
- Company response
- Blocked access to the affected area and applied a fix
5 sources
What people are saying
up to 27.26 million customer records may have leaked