2026-11-13
Unauthorized access to Netmile, run by Wills (up to about 5.49 million people): names, email addresses and more may have leaked — what members should do
On November 2, 2026, Wills Inc. announced that a third party had gained unauthorized access to the system environment of Netmile, a point-exchange service it runs in its advertising business, and that some members' personal information may have leaked. Up to about 5.49 million people may be affected, including members who have left. Name, email address and other information related to reward exchange may be included, and the type of information stored differs by member. The company does not hold credit card information or My Number Card information. It has not confirmed that the information was published or spread on the internet, or that it has been misused. To prevent secondary harm and for security measures it has suspended the Netmile and Sugutama sites, with no restart date. Netmile's notice says it guarantees held miles and that miles will not expire during the suspension. The date of the access, the date of detection and the cause have not been disclosed. As of November 13, 2026 we found no follow-up. Our conclusion: be ready for fake contact in the name of Netmile, banks and exchange partners, and change the password on any service where you reused your Netmile password.