Lawson announced on October 8 that 2,155,345 records of personal information were leaked due to unauthorized access to Lawson IDs and other related incidents.

The unauthorized access to Lawson IDs occurred between September 12 and 14, targeting data such as names and email addresses. In a separate incident, on September 17, there was also unauthorized access to information related to app reservations, resulting in the leak of 26 items, including names, phone numbers, and partial credit card numbers.

As of the announcement, no unauthorized use of the information or secondary damages have been confirmed. Lawson is proceeding with contacting affected individuals and providing information on inquiry channels.