TOKYO (TR) – Retail giant Ryohin Keikaku Co., the operator of Muji, has confirmed that the credit card information of approximately 1.09 million customers may have been compromised in a fresh wave of unauthorized access, reports Fuji News Network (Nov. 4).
According to the company, the breach specifically affects members of the “MUJI Card” program who joined prior to July 2021. The compromised data includes credit card numbers and dates of birth. However, the company claims that cardholder names and security codes (CVV) were not part of the leaked information.
Additionally, the company reported that another 120 records containing partial card numbers and names were exposed, involving customers who registered their payment details through the official Muji app or online store.
This revelation follows an announcement made by the company in late October, where it admitted that a separate security incident may have exposed up to 27.26 million email addresses and other user profile data. At that time, the company had insisted that no financial information was involved.
The company has not yet provided details on how the hackers bypassed security protocols or whether the stolen data has been used for fraudulent transactions. Customers are being urged to monitor their bank statements for any suspicious activity.
