Approximately 7 Million Member Records Leaked from Nojima Online Store and Used Mobile Phone Buyback Website

According to Security NEXT, Nojima detected an attack on its online store member management system on November 1, 2026, and subsequent investigation confirmed a data breach affecting members of both its online store and used mobile phone buyback website ^[1]. Approximately 7 million member records are involved, including names, addresses, phone numbers, dates of birth, email addresses, login IDs, and encrypted passwords ^[1]. The company has suspended services on both websites, blocked external access, enhanced monitoring, consulted with police, and notified the Personal Information Protection Commission; the timeline for service restoration will be announced once security is confirmed ^[1].

Industries mainly affected: Retail

The company has suspended services on both websites, blocked external access, enhanced monitoring, consulted with police, and notified the Personal Information Protection Commission; the timeline for service restoration will be announced once security is confirmed ^[1].