MUJI Japan leaks data of 1.09 million members, including MUJI Card credit card numbers
Ryohin Keikaku, the operator of MUJI, updated its October 30 breach notice: in addition to about 27.26 million MUJI App customer records, users of its online store were also affected. About 1.09 million MUJI Card credit-card members are involved, and leaked data includes full credit card numbers, MUJI Card IDs and birth dates, but not cardholder names, expiry dates or CVV codes. It matters because full card numbers were exposed at large scale, so affected members should watch for fraud even though the missing expiry and CVV limit direct misuse.
SOURCES