Overview
The notice gives "about 7 million" records (excluding former members), so the count is left blank. Names, birth dates, gender, addresses, phone numbers, login IDs, encrypted passwords and email addresses were involved. Card data is not held, and in-store Nojima Mobile member data was not affected.
Timeline
- Occurred
- Discovered
- Disclosed
Unauthorised access to the member system detected.
Leak announced.
Organization response
Blocked external access, strengthened monitoring, consulted police, prepared regulator reports, suspended the sites and force-reset affected passwords.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- ノジマオンラインの不正アクセスに伴う個人情報漏えいに関するお詫びとお知らせ（2026/11/4更新）株式会社ノジマ · 2026-11-09
- ノジマオンラインの不正アクセスに伴う個人情報漏えいに関するお詫びとお知らせ株式会社ノジマ · 2026-11-09