Overview
Unauthorised logins were observed from July 1 to August 12. "About 230,000" records as of August 13 (count blank): names, addresses, phones/fax, birth dates, gender, emails, points, service records and password hashes; no card data. The fourth report added "about 25,000" former customers (not added, as overlap is unclear).
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 不正アクセスによるシステム障害発生に関するお知らせとお詫び（第4報）株式会社チャーム · 2026-11-09
- 不正アクセスによるシステム障害発生に関するお知らせとお詫び株式会社チャーム · 2026-11-09