Japanese online printer Raksul says stolen upload-system credentials may have exposed data on business cards and postcards

Japanese online printing service Raksul said on November 9, 2026 that unauthorized third-party access to its print data upload processing system was found around 0:20 on November 8, that system credentials had been improperly obtained, and that some stored data was accessible from outside ^[1]. Names, company names, addresses, phone numbers and emails in uploaded print data, invoices and Web Yubin data may have leaked, possibly including third parties printed on business cards and postcards, while card data, login IDs and passwords were confirmed not leaked and the count is still being tallied ^[1][2]. Raksul urges users to beware of suspicious emails, texts and calls impersonating it or related firms and not to open their links or enter credentials, adding it never asks for passwords or card numbers by email or SMS ^[1].

Industries mainly affected: Retail

Raksul urges users to beware of suspicious emails, texts and calls impersonating it or related firms and not to open their links or enter credentials, adding it never asks for passwords or card numbers by email or SMS