Data Breach at Hankyu Hanshin Department Store Common ID System Affects Nearly All 1.26 Million Members

H2O Retailing and Hankyu Hanshin Department Store announced on October 19 that a portion of approximately 1.26 million H2O ID member records were leaked due to unauthorized access. The H2O ID is a common member ID used across eligible H2O Group services, including Hankyu Hanshin Department Store. Although the investigation is ongoing, the companies state that nearly all H2O ID members are affected.

The leaked information includes H2O ID, name, gender, email address, postal code, address, mobile phone number, phone number, age, date of birth, and services used. The breach was discovered on the 19th, stemming from unauthorized access to the customer management system via the "Hankyu Department Store / Hanshin Department Store Reservation Site."

Unauthorized access has also been confirmed on the e-commerce sites "HANKYU HANSHIN E-STORES" and "Remo Order." While these sites hold order history, a portion of card information (such as the last four digits of card numbers, cardholder names, and expiration dates), some point card information, and address book information, it is currently under investigation whether these specific data points were leaked.

The company is urging caution, warning that suspicious communications impersonating them may be sent to registered email addresses and phone numbers. It's unsettling to think that the simple act of convenient shopping could lead to such anxieties.