smishing
2 articles with this tag
Seicomart app breach (about 572,000 members): names, addresses and birth dates viewed — what members should do
On September 29, 2026, Seicomart Co., Ltd., which runs the Seicomart convenience-store chain in Japan, announced that a third party had gained unauthorized access to the server holding member data by way of the server behind its Seicomart smartphone app. Its third notice on September 30 said it had confirmed that data on 572,022 people who had registered with the app (49% of app members) was viewed: surname and given name, gender, date of birth, address, phone number, email address, and the dates they joined and left the Club Card program. Password data and purchase history were not leaked, and the company does not hold credit card data. No misuse of the Peco Mama Money e-money service has been found. This site's take: what was exposed is a set of personal details that cannot be changed, and the most likely next step is convincing emails, texts and calls that pose as the company. Do not follow links or instructions in such messages; check through the official app, in store, or with the customer service line. Also stop using your date of birth as a PIN or as an answer to identity checks.
Yamato Transport and Sagawa Express breaches (count under investigation): addresses and purchases may have leaked — what parcel recipients should do
Yamato Transport found unauthorized access to its Kuroneko deferred-payment service on September 28, 2026, and Sagawa Express found unauthorized access to its parcel tracking service on September 30. On October 1-2, both said personal data may have leaked. These are separate incidents, and neither company mentions a connection. For Sagawa, the data covers names, addresses and phone numbers of senders and recipients of about 100 days of parcels; for Yamato, deferred-payment users' names and contact details plus billing amounts, outstanding balances and item details. Neither includes credit card data or passwords, and counts are under investigation. This site's take: with Sagawa, you can be affected just by having received a parcel, even if you never used the company yourself. Assume fake missed-delivery notices and payment demands may now carry your real name, address, and what you received or bought. Do not open links in such messages; check in the official app or in the order history of the shop you bought from.