Security NEXT reported a data breach at Rohto Pharmaceutical (Japan) on 9 November 2026. It affected 2,797,545 people.
What we know as of
Status
Reported by Security NEXT; not yet confirmed by Rohto Pharmaceutical or an authority.
People affected
2,797,545 people.
When
First reported 9 November 2026.
How
Stolen credentials.
Rohto Pharmaceutical’s record
No earlier breach on record under this name.
Not known yet: what data was exposed, when it began and who was behind it. This page is updated as notices and statements come in.
Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure
People affected
2,797,545people
Reported
9 November 2026News report
What was exposed
Nobody has said yet what was exposed.
How it happened
How
Stolen password or login A third party used account information for the phone system used for customer service in mail-order sales to conduct unauthorized access.sourceOur translation from Japanese通信販売の顧客対応に利用している電話システムのアカウント情報を第三者が使用し、不正アクセスを行った
News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes
Questions about the Rohto Pharmaceutical breach
Was Rohto Pharmaceutical hacked?
Security NEXT reported a data breach at Rohto Pharmaceutical (Japan) on 9 November 2026. It affected 2,797,545 people. How it happened, by the sources: stolen credentials. It has been reported but not confirmed by Rohto Pharmaceutical or an authority.
What data was exposed in the Rohto Pharmaceutical breach?
The notices and reports so far do not say what was exposed. This page is updated when they do.
How do I know if I was affected?
Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.
Is there a Rohto Pharmaceutical data breach settlement?
No settlement open for claims is on record for Rohto Pharmaceutical as of 15 November 2026. Every open settlement is listed with its deadline.
Is a letter, email or text about the Rohto Pharmaceutical breach real or a scam?
A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Rohto Pharmaceutical’s own site, or check the letter here.
Privacy Unpacked