SHINDO2

BeautyMerit

CYND Co., Ltd.

Unauthorized accessSize not disclosed

POSSIBLE LEAKPhone number / Full nameInvestigating

Open in the live monitor ▶
Disclosed
Mar 24, 2026
Detected
Mar 10, 2026
Detection to disclosure
14 days
Leak
Leak possible
Type
Unauthorized access
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name
ContactPhone number, Email address
Unspecifiedand some other personal data

Who is affected

  • Customers of hair and beauty salons
  • Client salons

Cause

Unauthorized access by a cyberattack

Timeline

  1. Unauthorized access detected
  2. Official announcement

Response

  • Blocked the entry point
  • Forensic investigation

Identified the connection source, disconnected it from the network and engaged outside specialists

What you should do

  1. Don't open links in emails from this company. The apology email itself may be fake
  2. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources