H2O Retailing reports data breach affecting 1.26 million members

H2O Retailing and its subsidiary, Hankyu Hanshin Department Stores, announced on October 19 that a data breach involving approximately 1.26 million H2O ID members has occurred due to unauthorized access. The breach affects nearly all members of the common ID system, which was introduced in 2023 to provide unified access across various group services.

The leaked information includes H2O IDs, names, genders, email addresses, postal codes, addresses, mobile and landline numbers, ages, dates of birth, and the specific services used. While unauthorized access was also confirmed on the ‘HANKYU HANSHIN E-STORES’ and ‘Remo Order’ platforms, the company is still investigating whether data from those sites was compromised.

Regarding financial data, the company stated that full credit card numbers and security codes are not stored, reducing the risk of unauthorized transactions. Only partial information, such as the last four digits of card numbers, is held. No login passwords have been confirmed as leaked, and no secondary damage or unauthorized use has been reported thus far. H2O Retailing has reported the incident to the Personal Information Protection Commission and local police.