Overview
The second report fixed 1,797,124 members (first report: up to 1,801,499): names, addresses, birth dates, gender, phones, emails, member numbers, login IDs and non-recoverable passwords. No card data held. Detection date left blank because the reports state August 18 and August 19 respectively.
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- イエローハットにおける不正アクセスによる個人情報漏えいの可能性に関するお詫びとお知らせ株式会社イエローハット · 2026-11-09
- イエローハットにおける不正アクセスによる個人情報漏えいに関するお詫びとお知らせ【第二報】株式会社イエローハット · 2026-11-09