2026-11-09
Unauthorized access at Rohto Pharmaceutical's mail-order business (2,797,545 people in the customer system, 9,715 card numbers in call recordings): what phone-order customers and everyone else should do
On November 6, 2026, Rohto Pharmaceutical Co., Ltd. published the results of its investigation into unauthorized access to the phone system used for its mail-order business. Names, addresses and phone numbers of 2,797,545 people in the customer management system were taken (the items differ by person), and credit card numbers and expiry dates contained in call recordings were taken for 9,715 people. Card security codes and passwords are not included. The cause was that account credentials for the phone system were used by a third party without authorization. The outside expert investigation of the phone system finished on October 16, and affected people are being notified individually by post, email or similar means, in turn. No secondary damage attributable to the incident has been confirmed. This site's conclusion: if you may have read out your card number on a mail-order call, check your card statements whether or not you received a notice, and talk to your card issuer if worried. Everyone else should be wary of calls, emails and text messages from people who know their name, address and phone number.