Reported breach

H2O Retailing data breach

JPJapan · Retail and e-commerce · エイチ・ツー・オーリテイリング

Security NEXT reported a data breach at H2O Retailing (Japan) on 10 November 2026.

People affected: Not reportedno count given yet
Reported: 10 November 2026News report

What was exposed 6

Email addresses
Phone numbers
Dates of birth
Names
Addresses
Gender

How it happened

How: Hacking A third party accessed [the data] source
Our translation from Japanese
第三者がアクセスされた

Sources 1

News reportSecurity NEXTBreach on affiliated websites, personal information leaked - Hankyu Hanshin Department Store (our translation from Japanese)10 November 2026
Archived copy Wayback Machine, 10 November 2026

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

If H2O Retailing had your data

Look for H2O Retailing’s own notice or letter: it should say what of yours was involved. Keep it.
Your email address is out: expect convincing phishing. Open H2O Retailing by typing its address yourself, never through a link in an email or text, and check the sender before you reply.
Your phone number is out: ask your mobile operator for a PIN or port-out lock, so nobody can move your number to another SIM card and take your login codes.
Your home address is out: be wary of letters, parcels or visitors that mention H2O Retailing, and of texts asking for a “delivery fee”.
Expect scams that use your details: calls, texts or emails pretending to be H2O Retailing, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use H2O Retailing? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the H2O Retailing breach

Was H2O Retailing hacked?

Security NEXT reported a data breach at H2O Retailing (Japan) on 10 November 2026. How it happened, by the sources: hacking. It has been reported but not confirmed by H2O Retailing or an authority.

What data was exposed in the H2O Retailing breach?

Email addresses, Phone numbers, Dates of birth, Names, Addresses and Gender, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a H2O Retailing data breach settlement?

No settlement open for claims is on record for H2O Retailing as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the H2O Retailing breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to H2O Retailing’s own site, or check the letter here.

More breaches in Japan

Every breach in Japan →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.