Rakuten Group has responded to our magazine's inquiry regarding a post that appeared on a cybercrime forum claiming to sell approximately 110 million pieces of data, purportedly Rakuten member information. The company stated, "We have not confirmed any facts indicating that a data breach, as you inquired about, has occurred."
According to some reports, on October 4th, a post titled "SELLING Rakuten Japan 101M" appeared on a cybercrime forum. The poster claimed to be selling approximately 110 million pieces of data, which they asserted were from Rakuten's database. The sample data reportedly included items such as names, email addresses, physical addresses, and dates of birth, as well as Rakuten Point balances and member ranks.
When our magazine inquired with Rakuten Group about the facts, the company replied that no data breach has been confirmed. Regarding the sample data, they stated, "No corresponding accounts have been confirmed."
Furthermore, on October 6th, Rakuten Group announced that unauthorized third-party access occurred on its cloud storage service "Rakuten Drive," affecting 15,382 accounts. However, no connection to the post claiming to sell approximately 110 million pieces of data has been confirmed.
