2026-11-14
Yeny's ultra pay Card and three other services: member data leaked (1,332,505 records): phone numbers and member IDs, and what users should do
On November 12, 2026, Yeny, Inc. announced that part of the member information (phone numbers and the company's own member IDs) for ultra pay Card, Azul Claro Numazu Pay (アスルクラロ沼津Pay), Kamigami Kon Pay (巫神こんPay) and Toshiba Brave Lupus Tokyo Pay (東芝ブレイブルーパス東京Pay) leaked because of a flaw in an API connection setting. The count is 1,332,505 records, including former members. It is a number of records, not people, and no per-service breakdown is given. The company says leaks of payment information such as credit card numbers have not been confirmed, and that the leaked information alone cannot be used for unauthorized login to its app or for payments. It says it was told of suspicious API calls by a connected business on October 31, confirmed the leak on November 5, and reported to the Kanto Local Finance Bureau and the Personal Information Protection Commission on November 6. Affected users will be notified in the app's notice section. As of November 14, 2026, we found no follow-up. This site's conclusion: because phone numbers leaked, be ready for SMS and phone scams that use the name of ultra pay or the teams, and check the official app's notices to see whether you are affected.