Yamato Transport announced on October 16 the results of its investigation into unauthorized access to its "Kuroneko Deferred Payment Service." The company confirmed that approximately 5.26 million records of some users' information were illicitly exfiltrated. Yamato Transport stated that no secondary damage resulting from the unauthorized use of this information has been confirmed.
The exfiltrated customer information, dating from October 1, 2018, to September 28, 2026, includes names, addresses, phone numbers, product details (such as product names, quantities, and unit prices), and application numbers. Approximately 490,000 of these records also contained email addresses.
In addition, approximately 50,000 delivery address records, spanning from February 5, 2021, to September 28, 2026, were also compromised, including names, addresses, phone numbers, and waybill numbers. The company also reported that approximately 4,100 records containing merchant names and merchant codes were exfiltrated.
Made with AI
