Reported breach

Nojima data breach

JPJapan · ノジマ

Sankei News and Security NEXT reported a data breach at Nojima (Japan) on 2 November 2026. It affected 7,000,000 members.

What we know as of 6 November 2026

Status: Reported by Sankei News and Security NEXT; not yet confirmed by Nojima or an authority.
People affected: 7,000,000 members.
What was exposed: Passwords and logins, Email addresses, Phone numbers, Dates of birth, Names, Addresses and Gender.
When: First reported 2 November 2026.
How: Hacking.
Nojima’s record: No earlier breach on record under this name.

Not known yet: when it began and who was behind it. This page is updated as notices and statements come in.

Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure

People affected: 7,000,000members
Reported: 2 November 2026News report and 1 more

What was exposed 7

Passwords and logins
Email addresses
Phone numbers
Dates of birth
Names
Addresses
Gender

How it happened

How: Hacking Unauthorized access source
Our translation from Japanese
不正アクセス

Sources 2

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

If Nojima had your data

Look for Nojima’s own notice or letter: it should say what of yours was involved. Keep it.
Change your Nojima password, and the same password anywhere else you use it. Turn on two-step sign-in.
Your email address is out: expect convincing phishing. Open Nojima by typing its address yourself, never through a link in an email or text, and check the sender before you reply.
Your phone number is out: ask your mobile operator for a PIN or port-out lock, so nobody can move your number to another SIM card and take your login codes.
Your home address is out: be wary of letters, parcels or visitors that mention Nojima, and of texts asking for a “delivery fee”.
Expect scams that use your details: calls, texts or emails pretending to be Nojima, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use Nojima? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the Nojima breach

Was Nojima hacked?

Sankei News and Security NEXT reported a data breach at Nojima (Japan) on 2 November 2026. It affected 7,000,000 members. How it happened, by the sources: hacking. It has been reported but not confirmed by Nojima or an authority.

What data was exposed in the Nojima breach?

Passwords and logins, Email addresses, Phone numbers, Dates of birth, Names, Addresses and Gender, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Nojima data breach settlement?

No settlement open for claims is on record for Nojima as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the Nojima breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Nojima’s own site, or check the letter here.

More breaches in Japan

Every breach in Japan →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.