Privacy Unpacked

Confirmed breach

Joshin data breach

JPJapan

FNNプライムオンライン, Zonebourse and NEWS GEISPO reported a data breach at Joshin (Japan) on 26 October 2026, and it has been confirmed. It affected 6,230,000 records. Exposed: Passwords and logins, Phone numbers, Names, Addresses, Member IDs and Subscription contract information and more.

Status
Confirmed breach
People affected
6,230,000 records
Reported
26 October 2026
Who is affected
People worldwide

What was exposed

  • Passwords and logins
  • Phone numbers
  • Names
  • Addresses
  • Member IDs
  • Subscription contract information
  • Billing history
  • Membership numbers
  • Contract numbers

How it happened

How
Hacking 会社のシステムが不正アクセスを受け source

Sources

Read our story about this breach →

If Joshin had your data

  1. Look for Joshin’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Change your Joshin password, and the same password anywhere else you use it. Turn on two-step sign-in.
  3. Expect scams that use your details: calls, texts or emails pretending to be Joshin, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

More breaches in Japan

  1. Bandai Logistics PalreportedJPJapan · 27 October 2026 Phone numbersNamesAddresses+1 –not reported
  2. Sony Network CommunicationsJPJapan · 27 October 2026 Financial account and card detailsPasswords and loginsEmail addresses+3 2.6Mcustomer records
  3. JR EastJPJapan · 26 October 2026 Email addressesNames 170Krecords
  4. Rakuten TravelJPJapan · 26 October 2026 Financial account and card details 2.6Mcustomers
  5. Shizuoka CityreportedJPJapan · 26 October 2026 Email addressesNames 10Krecords

Every breach in Japan →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.