SHINDO4

K9 Natural Japan Co., Ltd.

Personal data~60,000records

LEAK CONFIRMEDPostal address / Date of birthUnauthorized access · Investigating

Open in the live monitor ▶
Disclosed
Jul 14, 2026
Detected
Jul 9, 2026
Detection to disclosure
5 days
Leak
Leak confirmed
Type
Unauthorized access
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced
Corporate number
3010401087863

What leaked

IdentityFull name, Date of birth, Gender, Occupation
ContactAddress, Phone number, Email address
Account dataMember ID, Points balance
CredentialsEncrypted passwords
Transactions & activityPurchase history

How many

  • Customer and business-partner records (being verified) ~60,000 records

Who is affected

  • Individual members
  • Business partners

Cause

The online shop's server was compromised by a third party (cause under investigation)

Timeline

  1. Learned of it from the Tokyo Metropolitan Police
  2. External access blocked
  3. First disclosure

Response

  • Blocked the entry point
  • Forensic investigation
  • More monitoring
  • Password reset
  • Phishing warning

External access blocked and investigation with outside help. Stronger access control and network monitoring, full system check. Customers asked to change passwords and stay alert

What you should do

  1. Change this password and every account that reused it now. Weak passwords crack even when hashed or encrypted. Switch to a passkey where offered
  2. Don't open links in emails from this company. The apology email itself may be fake
  3. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  4. Watch for unexpected mail or invoices; your address is hard to change
  5. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources