Hankyu Hanshin Department Store and H2O Retailing Breach Hits ~1.26M Member Records

H2O Retailing and Hankyu Hanshin Department Store announced on October 19 that unauthorized access leaked a portion of approximately 1.26M H2O ID member records, stating that nearly all H2O ID members are affected while the investigation continues. The intrusion originated on October 19 through the customer management system via the Hankyu Department Store and Hanshin Department Store Reservation Site, exposing H2O IDs, names, genders, email addresses, postal codes, physical addresses, mobile and landline phone numbers, ages, dates of birth, and services used. The companies also confirmed unauthorized access on the HANKYU HANSHIN E-STORES and Remo Order e-commerce platforms, which store order histories, address books, point card data, and partial payment card details including the last four digits, cardholder names, and expiration dates. Investigators are still determining whether the specific data points stored on HANKYU HANSHIN E-STORES and Remo Order were leaked, and the companies have warned members to watch for phishing messages impersonating the retailers via email or phone.