FANCL and Attenir Suffer Data Breach Affecting 780,000 Customers, Exposing Addresses, Names, Phone Numbers

FANCL and Attenir announced on October 16 that their respective e-commerce sites had suffered unauthorized access by a third party, leading to the leakage of some customer information. The affected individuals include 368,184 from FANCL and 417,312 from Attenir, totaling 785,496 people.

The leaked information includes email addresses, names, addresses, phone numbers, dates of birth, genders, and customer IDs. It also encompasses membership registration details such as point information, membership tiers, newsletter subscription preferences, and whether purchases were made in stores. Additionally, secondary email addresses set by some members and hashed secondary passwords were also compromised.

The companies have confirmed no public disclosure of the leaked information to an unspecified number of people, no misuse, and no secondary damages. Furthermore, no other unauthorized access incidents or malware infections beyond this specific case have been identified, and the companies state that there is no impact on their business operations or services.

Both companies are urging customers to be cautious of suspicious emails, SMS messages, and phone calls, and are requesting regular password changes.