Science & Tech · Cybersecurity · 4 hrs ago
Flower delivery service says up to 4.23 million records may have leaked
花キューピット says up to 4.23 million member records may have leaked after an unauthorized access incident in Japan.
The attack affected its Internet Flower Cupid and Business Flower Cupid online services on October 14 and 15.
The company confirmed a leak on October 19, and says the exposed information may include email addresses and user IDs.
Names, addresses, phone numbers and payment card details were not included, and passwords were stored in encrypted form.
The company says it has not found evidence of misuse linked to the incident, but warns that exposed email addresses could be used for phishing.
It recommends changing passwords, especially if the same login details are used on other services.
It has blocked the route used in the attack and strengthened monitoring, and says it will investigate with outside specialists to prevent a repeat.
Flower delivery company Hana Cupid said up to 4.23 million member records may have been exposed in an unauthorised access incident.
The records may include email addresses and user IDs, but not names, addresses, phone numbers, credit card numbers or delivery details.
The affected services are Internet Hana Cupid and the business service Business Hana Cupid.
The company said it confirmed information had leaked on October 19 after unauthorised access on October 14 and 15.
It is contacting affected members and advises them to watch for suspicious messages and change their passwords.
- Who
- Hana Cupid, a flower delivery company.
- What
- Unauthorised access may have exposed up to 4.23 million member records, including email addresses and user IDs.
- When
- The access took place on October 14–15, 2026; the company confirmed a leak on October 19.
- Where
- The affected services are Internet Hana Cupid and Business Hana Cupid. The company is based in Tokyo.
- Why
- The reason for the unauthorised access is Not stated.
This story does not have two clearly opposing sides.
A third party gained unauthorised access to the company’s management system.
The company confirmed that member information had leaked.
Hana Cupid began notifying potentially affected members by email.
News reports said up to 4.23 million member records may have been exposed.
- Potentially affected records
- Up to 4.23 million
- Affected services
- Internet Hana Cupid; Business Hana Cupid
- Access dates
- October 14–15, 2026
- Leak confirmed
- October 19, 2026
- Information excluded
- Names, addresses, phone numbers, credit card numbers and delivery details