Science & Tech · Cybersecurity · 3 hrs ago
About 1.09 million MUJI customer records may have been exposed
Unauthorized access may have exposed MUJI customer information in an incident involving the company’s official app.
An investigation found that about 1.09 million records may be affected.
The potentially exposed information may include complete MUJI Card numbers, not just partial card details.
MUJI Card is a credit card associated with the Japanese retailer MUJI.
The possibility of full card numbers being exposed matters because they are sensitive payment information.
The available information does not say what steps customers should take or what action the company will take next.
Ryohin Keikaku said information including full MUJI Card numbers for about 1.09 million members may have been accessed in an unauthorized intrusion.
The affected MUJI Card records relate to people who joined by July 2021, and about 345,000 of the cards are still active.
The company also expanded the scope of an earlier disclosure involving up to about 27.26 million customer records.
It said it has not confirmed information appearing on the dark web or any harm from misuse.
MUJI’s app and online store remain available, and the company is contacting affected customers.
- Who
- Ryohin Keikaku, the company that operates MUJI, disclosed the possible exposure. MUJI Card members and other customers may be affected.
- What
- Information including full MUJI Card numbers for about 1.09 million members may have been accessed. Other customer information was also potentially accessed.
- When
- The additional information was announced on November 4, 2026. The company had first announced the unauthorized access on October 30.
- Where
- The intrusion involved MUJI’s official app and customer information held in its systems. The company is based in Bunkyo, Tokyo.
- Why
- Not stated
This story does not have two clearly opposing sides.
Ryohin Keikaku announced unauthorized access involving the MUJI app and up to about 27.26 million customer records.
The company said full MUJI Card numbers and other information may also have been accessed, and expanded the scope of the affected records.
- MUJI Card records
- About 1.09 million
- Active cards among affected records
- About 345,000
- MUJI Card membership cutoff
- Members who joined by July 2021
- Broader customer records
- Up to about 27.26 million
- Records including names, addresses and phone numbers
- About 520,000