Muji operator apologizes for possible large-scale credit card data leak-Xinhua - 新华网

TOKYO, Nov. 12 (Xinhua) -- Ryohin Keikaku Co., the operator of Japanese retail brand Muji, said Thursday that customer data, including about 1.09 million credit card records, may have been leaked through unauthorized access that exploited security vulnerabilities in its system.

At a press conference in Tokyo, President Satoshi Shimizu apologized for the incident.

The credit card records that may have been exposed belong to customers who had signed up for the co-branded Muji Card credit card by July 2021, and include the full numbers of expired, canceled and still-valid cards, according to the company.

The company said it would cover the cost of reissuing credit cards in cases where full card numbers had been leaked and would also provide compensation based on the circumstances if any actual damage came to light.

The company also acknowledged that there were problems with its data management practices.

On Oct. 30 this year, the company disclosed that unauthorized access to its Muji app may have exposed up to 27.26 million customer records, including those of former members.

Following the data leak, the company has addressed the system vulnerabilities and implemented fixes to prevent unauthorized access.

The company has suspended its official Muji online store and most app functions while strengthening security, and has yet to decide when the online store will reopen. ■