Investigating

Ride On Express HD: vendor ransomware may have exposed up to about 6.5M personal records

3rd notice Oct 13, 2026. Suspicious access from Oct 5; ransomware report and shutdown Oct 7. No clear confirmed exfiltration footprint yet, but up to about 6.5M official-site/app registrant records (name/address/phone/email/sex/DOB/password hash/order history/member ID) may have leaked. No cards held. Demae-can/Uber Eats/phone-only orders out of scope.

Last updated: 2026-11-09

Overview

“Up to about 6.5M” → blank.

Timeline

UnknownOccurred
2026-10-07Discovered
2026-10-13Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

サイバー攻撃による個人情報漏えいの可能性に関するお詫びとお知らせ（第3報）株式会社ライドオンエクスプレスホールディングス · 2026-11-09

Ride On Express HD: vendor ransomware may have exposed up to about 6.5M personal records

Overview

Timeline

Organization response

What you can do

Sources

Related information

No published information yet

Comments and replies

Write a comment