Lawson app-related system abused in Japan, leaking emails and names of about 2.15 million Lawson ID members

According to INTERNET Watch, Japanese convenience store chain Lawson announced on October 8 that an October 7 investigation found unauthorized access to Lawson ID from September 12 to 14 and to Lawson app reservations on September 17 ^[1]. Leaked data includes emails, names, gender, phone numbers and newsletter details of 2,155,345 Lawson ID records and names, phones and partial card numbers of 26 reservation users; the cause is believed to be abuse of a system related to the Lawson app ^[1]. Affected users should watch for Lawson's individual notification emails; the app reservation feature has been suspended ^[1].

Industries mainly affected: Retail

1. Watch for Lawson's individual notification emails ^[1].
2. Beware of suspicious contact using leaked names, emails and phone numbers ^[1].