Présentation
The notice gives "about 5.7 million" (Tabelog ~4.19M, Kakaku.com ~1.37M, Sumaity ~140k, Kyujinbox 142, icotto 4). Kakaku.com also includes birth date/gender for about 650,000 and icotto includes 2 user IDs. Count left blank as approximate. Email bodies were not involved. Per the company, this stems from unauthorised access to the Arara email-delivery platform (recorded separately); this figure is a subset of the vendor scope and must not be added to it.
Chronologie
- Survenue
- Découverte
- Divulgation
Réponse de l’organisation
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
Que faire ?
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 業務委託先への不正アクセスに伴う当社サービスをご利用いただいているお客さまのメールアドレス漏えいについて株式会社カカクコム · 2026-11-09