Intruders breach Japanese flower-delivery operator Hana Cupid's management system in mid-October, exposing login IDs, password hashes and emails of about 4.24 million members

Japanese flower-delivery operator Hana Cupid (花キューピット) said on October 28 that a third party gained unauthorized access to its management system on October 14-15, and that it confirmed during its investigation on October 19 that member data had leaked ^[1][2]. Affected are members who registered an email address on Internet Hana Cupid and Business Hana Cupid, up to 4,238,242 records, with login IDs, hashed passwords and PC and mobile email addresses exposed, while names, addresses, phone numbers and credit card numbers were not leaked ^[1][3]. The company says no secondary misuse has been found so far, has cut off the attack paths and has been notifying members by email since October 28, and recommends that members change their passwords and watch for phishing emails impersonating the company or financial institutions ^[1].

Industries mainly affected: Retail

The company says no secondary misuse has been found so far, has cut off the attack paths and has been notifying members by email since October 28, and recommends that members change their passwords and watch for phishing emails impersonating the company or financial institutions