@cosme breach leaks data on about 3 million members, including skin and hair types ยท updates https://pwn.watch/i/istyle-cosme-member-data-breach-3m-nov-2026 istyle, which runs Japan's @cosme beauty review and shopping site, said on Nov 2 2026 that unauthorized access to @cosme, confirmed on Oct 28, leaked part of the member data tied to @cosme common IDs for about 3 million people, including members who have since left. The leaked fields are user IDs, nicknames, names, postal codes, addresses, phone numbers, email addresses, gender, birth dates, skin type and hair type. Login passwords and credit card data were not included. istyle has not disclosed how the attacker got in, is investigating with an outside security firm and says it has seen no misuse so far. en Fri, 06 Nov 2026 00:00:00 GMT @cosme breach leaks data on about 3 million members, including skin and hair types: istyle's planned completion date for emailing affected members individually from the cosme.net domain. https://pwn.watch/i/istyle-cosme-member-data-breach-3m-nov-2026 https://pwn.watch/i/istyle-cosme-member-data-breach-3m-nov-2026#2026-11-06-960265ea Fri, 06 Nov 2026 00:00:00 GMT high <p><a href="https://www.istyle.co.jp/news/info/2026/11/1102.html">Source</a></p> @cosme breach leaks data on about 3 million members, including skin and hair types: istyle discloses the breach: about 3 million members, including people who have since left, had user IDs, nicknames, names, postal codes, addresses, phone numbers, emails, gender, birth dates, skin type and hair type leaked. Login passwords and card data were not included. It has reported to Japan's Personal Information Protection Commission and is investigating with an outside security firm. https://pwn.watch/i/istyle-cosme-member-data-breach-3m-nov-2026 https://pwn.watch/i/istyle-cosme-member-data-breach-3m-nov-2026#2026-11-02-0919da26 Mon, 02 Nov 2026 00:00:00 GMT high <p><a href="https://www.istyle.co.jp/news/info/2026/11/1102.html">Source</a></p> @cosme breach leaks data on about 3 million members, including skin and hair types: istyle confirms that a third party's unauthorized access to @cosme leaked part of the member data registered to @cosme common IDs, and starts containment. https://pwn.watch/i/istyle-cosme-member-data-breach-3m-nov-2026 https://pwn.watch/i/istyle-cosme-member-data-breach-3m-nov-2026#2026-10-28-65530e1e Wed, 28 Oct 2026 00:00:00 GMT high <p><a href="https://www.istyle.co.jp/news/info/2026/11/1102.html">Source</a></p>