Nojima said on 2 November that on 1 November it detected and confirmed unauthorized access to the membership system of its e-commerce sites, and that registered member information had leaked [1]. The affected sites are Nojima Online and its used-phone trade-in site, covering about 7 million records, not including people who had already cancelled, with names (kanji and kana), dates of birth, sex, postal codes, addresses, phone numbers, login IDs, encrypted passwords and email addresses. It said those sites do not store credit-card data, that whether misuse or secondary harm has occurred is still being investigated, and that the sites have been suspended [1]. It warned that the leaked data may be used for impersonating emails or phishing, and asked people to be careful with unexpected emails, SMS or calls and not to open unexpected links or attachments; questions can go to the Nojima customer center at 0120-574-853 (09:30–19:00) [1].
HighMonitoringOfficially confirmed
Nojima Online membership-system breach exposes about 7 million records; official notice warns of phishing
1 min read
- Disclosed
- Nov 2, 2026
- Occurred
- Nov 1, 2026
- Published
- Nov 12, 2026
- Last updated
- Nov 12, 2026
- Scale
- 7,000,000 records[1]
- CVSS basis
- Our assessment
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
- Be careful with unexpected emails, SMS or calls, and do not open unexpected links or attachments [1].
- The affected sites have been suspended; when they resume, the company will post a notice on those sites, so do not follow an unexpected “resumption” link [1].
- For questions, call the Nojima customer center at 0120-574-853 (09:30–19:00) [1].
Timeline
Technical details
Remediation
Vendor guidance
- 1Watch for impersonating or phishing messages; do not open unexpected links mitigate[1]
Be careful with unexpected email, SMS or calls, do not open unexpected links or attachments, and rely only on official site notices about service resumption.
References
Official / primary1
- [1]株式会社ノジマ2026-11-02Accessed 2026-11-12Snapshot 2026-11-12 sha256 c39a250924af
“不審なメール、SMS、お電話等には十分ご注意いただき、身に覚えのないリンクや添付ファイルを開かないようお願い申し上げます”
Expert help
Still not sure whether this affects you?
Tell us about your environment. We'll check it against this advisory, assess the risk, and give you concrete patch and monitoring steps.
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.