Ryohin Keikaku

Security incidents tagged Ryohin Keikaku. Newest first.

1 Ryohin Keikaku incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Brought to you byTinkerer Club

The private club for people who own their servers, run their own AI, and pay $0/month for software.

HighPartly patched
Muji breach: up to 27.26 million customer records and 1.09 million full MUJI Card numbers may have leaked
Ryohin Keikaku, the company behind Muji, says unauthorized access to its systems on Oct 29 2026 may have exposed up to about 27.26 million MUJI app and Muji online store customer records (email addresses, birth dates, gender and member IDs, including former members), about 520,000 of them with names, addresses and phone numbers. Its Nov 4 follow-up adds about 1.09 million MUJI Card records holding full card numbers, birth dates and MUJI Card IDs, which the company had kept from a pre-2021 points scheme; about 345,000 of those cards are still valid. Cardholder names, expiry dates and security codes were not included. Card issuer Credit Saison has seen no rise in fraud, is monitoring the cards and reissues them on request. Ryohin Keikaku says it blocked the access and has found no sign of the data on the dark web so far.
MUJI app, Muji online store and MUJI Card data (Ryohin Keikaku)Since Oct 29, 2026updated Nov 5, 2026, 01:28 UTC