Overview
The incident occurred October 28-31, 2026. The notice gives "up to about 7 million" records, so the count is left blank. Member data including email addresses, names, birth dates and phone numbers was involved; card data is not held. Online ordering was not affected. The notice does not name the provider.
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
The delivery service has been fully suspended.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 外部委託先の提供する「ほっともっとのメールマガジン配信サービス」への不正アクセスと対応について株式会社プレナス · 2026-11-09