LAWSON Entertainment said on 4 November that Dentsu Soken had reported unauthorized access to its FACERE service and iPLAss platform, which the company uses for Enta GO and LAWSON DO! SPORTS; Enta GO customer data may have been viewed, and some LAWSON DO! SPORTS customer data may have leaked [1]. Enta GO covers up to 12,196 people (names, phone numbers, email addresses and reservation details, possibly viewed). LAWSON DO! SPORTS covers 27,908 people across 57 password-protected zip files confirmed in a 6 November addendum, including names, addresses, phone numbers, email addresses, sex, dates of birth and health-related event-entry questionnaire answers. The company said neither service stores card, other payment data or passwords, its own systems were not found to have been accessed, and the cause was an access-control misconfiguration at Dentsu Soken [1]. It warned that unexpected emails or messages may follow, and asked people not to open URLs in unfamiliar messages or enter personal data; individual notices will come from email@hmv.co.jp for Enta GO and domail@l-tike.com for LAWSON DO! SPORTS [1].
HighMonitoringOfficially confirmed
LAWSON Entertainment reports vendor breaches affecting Enta GO and LAWSON DO! SPORTS customer data
1 min read
- Disclosed
- Nov 4, 2026
- Occurred
- Sep 10, 2026
- Published
- Nov 12, 2026
- Last updated
- Nov 12, 2026
- Scale
- 27,908 people[1]
- CVSS basis
- Our assessment
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Media, entertainment & gaming
What to do nowOur advice
- Do not open URLs in unexpected emails or messages, and do not enter personal data in them [1].
- Official individual notices come from email@hmv.co.jp (Enta GO) or domail@l-tike.com (LAWSON DO! SPORTS); check the sender before trusting other messages that claim to be official [1].
- Questions can be sent through the official Enta GO and LAWSON DO! SPORTS contact windows listed in the notice [1].
Timeline
Technical details
Remediation
Vendor guidance
- 1Do not open unexpected links or enter personal data mitigate[1]
Watch for follow-on messages, do not open unexpected URLs or enter personal data, and check the official sender addresses.
References
Official / primary1
- [1]株式会社ローソンエンタテインメント2026-11-04Accessed 2026-11-12Snapshot 2026-11-12 sha256 efa6f4d3fe8e
“心当たりのないメールやメッセージに記載された URL を開いたり、個人情報を入力したりしないよう、十分にご注意ください”
Expert help
Still not sure whether this affects you?
Tell us about your environment. We'll check it against this advisory, assess the risk, and give you concrete patch and monitoring steps.
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.