2026-10-30
Benefit One 'Toku-Kai' Contractor Breach (29,465 People): Names, Birth Dates and Email Addresses Leaked, and What Members Should Do
On October 28, 2026, Benefit One Inc. announced that a system run by one of its outsourcing contractors was accessed without authorization and that personal data of 29,465 members (including some who have already left) of Toku-Kai, a service for Credit Saison Co., Ltd. cardholders, leaked. The access happened intermittently from October 14 to 20; the contractor detected part of it on October 21 and reported it to Benefit One, which suspended the service the same day. The leaked items are name, furigana (reading of the name), date of birth, gender, postal code, email address, customer number, enrollment and withdrawal information, and a management number used for membership-fee payment processing (items vary by member). Separately, some of Benefit One's authentication-related information used to link to the payment system may have leaked; it was changed on October 26, and no fraudulent payment attributable to this incident has been confirmed. Benefit One says card numbers, expiry dates and security codes are not held in the affected system and did not leak. The company says the data did not come from Credit Saison's systems. The cause and the final number are under investigation. This site's take: Benefit One's notice does not ask members to change card numbers, but names, birth dates and email addresses leaked, so do not open links in messages claiming to be from the company or its partners, and verify on an official site you open yourself.