Japanese retailer Hands Corporation reports data breach
Learn More
Hands Corporation reports that their "Hands Club App" experienced a security breach resulting in the exposure of personal information belonging to 121,886 members.
The unauthorized access was detected through abnormal login patterns on December 2, after occurring repeatedly since November 27, 2024.
The breach occurred due to the exploitation of a software vulnerability in the Hands Club App system. Hands Corporation implemented emergency security measures on December 5, and implemented mandatory password change requirements. Exposed data includes:
- Full names
- Member numbers
- Email addresses
- Login passwords
- Postal codes
- Physical addresses
- Phone numbers
- Gender information
- Dates of birth
The company claims that no credit card information was compromised in the breach.
The company has reported to relevant authorities including the Privacy Commission and law enforcement and are cooperating with ongoing police investigation.
