Investigating

TOMOWEL Payment Service: customer/contact data may have leaked via Meruhaikun

Possible data leak: First notice June 19, 2026 on Meruhaikun intrusion; follow-up confirmed leakage of service-admin and inquiry/contact records. Card data out of scope. Vendor root to be linked later.

Last updated: 2026-11-09

Overview

Follow-up lists 21 admin and 4,265 inquiry contacts separately; not summed, so count blank.

Timeline

UnknownOccurred
UnknownDiscovered
2026-06-19Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

める配くん不正アクセスに関する続報TOMOWEL Payment Service株式会社 · 2026-11-09
（初報）当社が利用するクラウドサービス「める配くん」に対する不正アクセスの発生および個人情報流出の可能性についてTOMOWEL Payment Service株式会社 · 2026-11-09

TOMOWEL Payment Service: customer/contact data may have leaked via Meruhaikun

Overview

Timeline

Organization response

What you can do

Sources

Related information

No published information yet

Comments and replies

Write a comment