FANCL and its subsidiary Attenir announced on October 16 that an internal investigation on the 15th found their e-commerce sites were accessed without authorization between October 3 and 10, and they identified and disabled the abused function [1]. Leaked data covers 393,785 FANCL and 441,162 Attenir member records including emails, names, addresses, phones, birth dates and customer numbers, plus sub-email addresses with hashed secondary passwords set by some members; main passwords and payment data were not included [1][2]. Members should beware of suspicious emails, texts and calls, avoid unfamiliar links or attachments and update passwords regularly [1].
FANCL and Attenir e-commerce sites breached in early October, leaking addresses and phone numbers of about 835,000 member records
1 min read
- Disclosed
- Oct 16, 2026
- Occurred
- Oct 3, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 834,947 records[2]
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
- Beware of suspicious emails, texts and calls and do not open unfamiliar links or attachments [1].
- Update your FANCL and Attenir passwords regularly .
Timeline
Technical details
Remediation
Vendor guidance
- 1Update password and watch for scams mitigate[1]
Update passwords regularly and beware of impersonation emails and texts.
References
Official / primary1
- [1]
“2026年10月15日(木)に実施した内部調査により、同年10月3日(土)から10月10日(土)までの間に、ファンケルおよびアテニアのECサイトが不正アクセスを受けていたことが判明しました。”
Media1
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.