概述
Abuse of an API exposed names, addresses, phones, dates of birth, sex, email, member/app IDs, app passwords, points and vehicle information; credit-card data was excluded. An official image dated October 23 postponed expected resumption until mid-November or later; the app is not described as already restored. Occurrence and discovery dates are not established in this entry.
時間軸
- 發生
- 發現
- 公布
Initial notice disclosed possible leakage.
Final report confirmed exposure affecting 3,179,454 people.
Dated notice image announced delayed resumption.
組織應對措施
The company restricted app functions, investigated and rebuilt systems with vulnerability testing. It postponed resumption and extended membership/points validity.
使用者應對建議
Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.
資訊來源
- アプリの不正アクセス・第二報・6月19日最終報２りんかんイエローハット · 2026-11-09
- アプリ再開延期：10月23日付本文画像２りんかんイエローハット · 2026-11-09