Overview
App members: 2,000 records (possibly up to 3,000) with IDs, prefecture, names, phones, birth dates, emails, encrypted passwords and points. Delivery/order: 2,377,127 with IDs, delivery addresses, names, phones and points. Categories are not summed; count stores the latter. No card data held.
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 松屋公式アプリ（松弁ネット・モバイルオーダー・松弁デリバリー）管理システムに対する第三者からの不正アクセスによる個人情報漏えいに関するお詫びとお知らせ株式会社松屋フーズホールディングス · 2026-11-09