Overview
Only members who logged in and opened the campaign page 9:31–18:12 on January 22 may be affected; notice says “up to 557” so count blank. Fields: email, name, gender, phone, address, occupation, birth month/year. No off-site exfiltration or misuse confirmed. Cause: CDN cache misconfiguration.
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 会員サイト「エバラ CLUB」における表示不具合に関するお詫びとご報告エバラ食品工業株式会社 · 2026-11-09
- 会員サイト「エバラ CLUB」における表示不具合に関するお詫びとご報告（第2報）エバラ食品工業株式会社 · 2026-11-09