Investigating

MoonStar: server intrusion may have exposed online-store customer data for up to about 593,000 people

Possible data leak: First notice Mar 26, 2026 reported suspected server intrusion (no confirmed theft then). Oct 2/15 follow-ups concluded name/address/phone/email/order data likely leaked May 14–19 for up to 593,000 online-store customers. Cards/passwords not stored. First disclosure remains Mar 26.

Last updated: 2026-11-09

Overview

“Up to 593,000” → blank.

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

  1. 【重要】弊社システムサーバーに対する不正アクセスの疑いに関するお知らせ【第2報】株式会社ムーンスター · 2026-11-09
  2. 【重要】当社サーバーに対する不正アクセスの疑いに関するお知らせ株式会社ムーンスター · 2026-11-09
  3. 【重要】弊社システムサーバーに対する不正アクセスの疑いに関するお知らせ【第3報】株式会社ムーンスター · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.

Comments and replies

Write a comment

No account needed. Comments appear immediately.

Do not post private names, addresses, passwords, or codes. Automatic masking is limited; review your content before submitting.

Required fields are marked *.

After submitting the text, you can redact and attach images.

Loading the security check. You can submit once it is complete.