Data of more than 10 million customers exposed in cyberattacks on Japanese firms

Two Japanese companies have reported cyberattacks that may have exposed information belonging to millions of customers, local media reported Monday.

“Monogatari Corp.”, which operates the “Yakiniku King” barbecue restaurant chain, said information belonging to more than 10 million customers was leaked after unauthorized access to its reservation and rewards app, according to “Kyodo News”.

The compromised information included customers’ names, email addresses, phone numbers and membership numbers. The company said it detected the breach on Friday and had found no evidence so far that the data had been misused.

Separately, “Daiwa Securities Group” said information belonging to around 110,000 customers of its brokerage unit may have been compromised after unauthorized access to a server operated by contractor “Scala Communications Inc.”, “Kyodo News” reported.

The intrusion took place between Friday evening and Saturday morning. The server supports an online customer inquiry management service provided to “Daiwa Securities”.

Potentially exposed information includes names, email addresses and account numbers. Around 220,000 data items may have been affected, including inquiries that contained no personal information.

“Daiwa” said the information could not be used to conduct transactions, including online trades. The brokerage also said it had found no evidence so far that the potentially compromised data had been published or circulated online.