Yumilink data breach affects multiple Japanese companies

A major security breach at Yumilink, a provider of the Cuenote FC email delivery service, has resulted in the potential leakage of customer information across several prominent Japanese organizations. The breach occurred due to unauthorized access via a program vulnerability that allowed attackers to obtain authentication credentials and export data from the database.

Life Card reported that approximately 339,610 contracts may be affected, with leaked data potentially including names, email addresses, card names, and partial ETC card numbers. Bandai Namco Entertainment and BANDAI SPIRITS also announced that 346,247 member records from THE GUNDAM BASE MEMBERS service were compromised. Additionally, Asahi Shimbun reported that 70,921 customer records related to various events and educational programs may have been leaked.

Other entities, including JR Central, JR West, and JR Kyushu, have also reported information leaks related to their reservation services. While the breaches originated from the third-party service provider rather than the companies' internal systems, the affected organizations have warned customers to be vigilant against phishing attempts, suspicious emails, and fraudulent URLs.