5CriticalConfirmedAnnounced Updated
Names and emails in 2,155,345 Lawson ID records, and separate data from 26 app reservations, leaked. The suspended reservation feature fully resumed on October 19 and requires an app update.
This incident was imported from a dataset that compiles public announcements, and we are still checking it against the sources. Counts and causes will be updated after the check. Sources are in Japanese.
| Data | Status | Count | Group | Evidence |
|---|---|---|---|---|
| Name | Leak confirmed | 2,155,345 records | ローソンID | Source(opens in a new tab) |
| Email address | Leak confirmed | 2,155,345 records | ローソンID | Source(opens in a new tab) |
| Phone number | Leak confirmed | Not disclosed | ローソンID | Source(opens in a new tab) |
| Postal address | Leak confirmed | Not disclosed | ローソンID | Source(opens in a new tab) |
| Name | Leak confirmed | 26 records | ローソンアプリ予約 | Source(opens in a new tab) |
| Phone number | Leak confirmed | 26 records | ローソンアプリ予約 | Source(opens in a new tab) |
| Payment details | Leak confirmed | Not disclosed | ローソンアプリ予約 | Source(opens in a new tab) |
Counts are the figures the organization announced. Because the same person may be counted more than once, we do not add the rows together.
General steps based on the type of data involved. Check the organization’s notice or help line to see whether you are affected.
Picked from the cause of the incident: tools that help you check your own systems for the same kind of weakness, or spot the warning signs.
An agentless vulnerability scanner that checks the packages installed on a server and lists the ones affected by known CVEs.
A free security platform (SIEM/XDR) that collects logs, configuration, and vulnerability data from agents on your endpoints and shows it all in one dashboard.
An intrusion detection and prevention engine (IDS/IPS) that matches network traffic against rules and records suspicious activity as alerts.
UpDown to select Enter to open Esc to close