Overview
Lawson ID: 2,155,345 records (names, gender, phones, addresses; on October 24 corrected to exclude email and newsletter data and to add possible birth-date exposure). App reservations: 26 records (name, phone, partial card number); not added together. Cause: abuse of the mechanism that displays information to app users.
Timeline
- Occurred
- Discovered
- Disclosed
Leak announced.
Data fields corrected.
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 第三者による不正アクセスに伴う個人情報漏えいに関するお詫びとお知らせ株式会社ローソン · 2026-11-09