Rakuten Denies Rumors of 100 Million-Member Data Leak — 5ch: ‘Does It Even Have That Many Members?’

From our other sites

The story

A post appeared on a cybercrime forum claiming to sell roughly 101 million pieces of data said to be Rakuten member information, sparking concern over a possible leak on social media. In response, Rakuten Group issued a denial, stating “no fact of a data leak has been confirmed.” On 5ch, opinions clashed: some argued the figure itself isn’t unnatural given that Rakuten officially reports “over 100 million” domestic members, while others pointed to the sheer volume of phishing emails they receive and suspected “this has probably been leaking for a while.” Posts also expressed very real, practical anxiety over whether assets held at Rakuten Bank are safe.

Rakuten Group Denies Rumors of a Leak Involving Over 100 Million Members’ Data — “No Fact of a Data Leak Has Been Confirmed”

A post appeared on a cybercrime forum offering to sell roughly 101 million pieces of data said to be Rakuten member information, and concern spread on social media. There are fears of harmful effects such as leaked subscriber information for services including Rakuten Mobile, along with leaked personal data and fraudulent use.

(omitted)

Source: news.yahoo.co.jp / Original article here

What people said

4AnonymousOct 10, 2026 12:24
That's a bad move. If it turns out data really was leaked, it'll just look like they didn't even notice it happening.
65AnonymousOct 10, 2026 12:41
Re: #4
So what would be a good response then?
11AnonymousOct 10, 2026 12:26
Wouldn't be surprised at all if Rakuten actually did leak data, but the number being over 100 million is the weird part. Does Rakuten really have that many members?
35AnonymousOct 10, 2026 12:31
Re: #11
Well sure, that's counting dogs, cats, goldfish, and dead people as members too.
37AnonymousOct 10, 2026 12:32
Amazon, Rakuten, Apple, the National Tax Agency — I get a ton of phishing emails claiming to be from them.
176AnonymousOct 10, 2026 14:12
Re: #37
It's already been leaking for ages, right?
40AnonymousOct 10, 2026 12:34
If all the Rakuten points I diligently saved up turn out to be worthless, I might actually lose it.
53AnonymousOct 10, 2026 12:38
Re: #40
I've got over 2 million points built up through investing, so this isn't a joke for me.
42AnonymousOct 10, 2026 12:35
I've been with Rakuten since the early days, so this would genuinely be a problem for me… Though honestly, I get weird emails all the time at an address I've only ever registered with Rakuten, so my info's probably been leaked before anyway lol
49AnonymousOct 10, 2026 12:37
Re: #42
Since back then, huh
https://corp.rakuten.co.jp/about/assets/img/history/1997.jpg
58AnonymousOct 10, 2026 12:39
There's no way it's 100 million — that part really sounds fishy.
63AnonymousOct 10, 2026 12:41
Re: #58
If you're counting per card/account, isn't around 100 million about right?
64AnonymousOct 10, 2026 12:41
Re: #58
People have multiple accounts each, so it's entirely possible.
80AnonymousOct 10, 2026 12:51
If they genuinely don't even know whether it happened, that's even more incompetent.

Personally, given the sheer volume of spam I get at the address I registered with Rakuten, I think they've been leaking data for ages.
82AnonymousOct 10, 2026 12:52
Re: #80
Then again, it could just be the same source sending stuff under different disguises.
86AnonymousOct 10, 2026 12:55
Is Rakuten Bank okay? Should I withdraw my money just in case? Can someone who actually knows please explain?
91AnonymousOct 10, 2026 12:58
Re: #86
It's not like Rakuten specifically is being targeted, so if outsiders could pull this off, every other bank would be in trouble too.
93AnonymousOct 10, 2026 12:59
Re: #86
Your Rakuten Bank account is actually separate from your Rakuten account. Rakuten Bank doesn't send paper balance statements, so you should make sure your family knows how to access it, just in case.
90AnonymousOct 10, 2026 12:58
I got an email saying 'Your Rakuten member account may have been accessed by a third party, so for security reasons we have reset your Rakuten account password.' There wasn't even a clickable link in it, so I figured it must be real, opened Rakuten and logged in myself — but my password hadn't actually been reset. What was that about?
92AnonymousOct 10, 2026 12:59
Re: #90
Wait, you actually logged in?
99AnonymousOct 10, 2026 13:02
Re: #90
That's worrying… please tell me that's a joke.
202AnonymousOct 10, 2026 15:42
Re: #90
Just contact Rakuten directly about it. You'd want to know if someone really did log into your account, right?
98AnonymousOct 10, 2026 13:01
Re: #91,93
Maybe I should move my money to MUFG or SMBC, since their security is supposedly tighter than Rakuten Bank's?
116AnonymousOct 10, 2026 13:08
Re: #98
How do you know such detailed internal technical stuff?
102AnonymousOct 10, 2026 13:03
As long as nobody confirms the facts, nothing officially 'happened.'
108AnonymousOct 10, 2026 13:05
Re: #102 Is this quantum mechanics or something lol
109AnonymousOct 10, 2026 13:06
If attackers are using AI for cyberattacks, then use AI to defend too. AI can keep watch 24/7, no problem. And have it trace the attackers back and counterattack.
123AnonymousOct 10, 2026 13:10
Re: #109 Saw this on TV. They compared it to a soccer goal — the attacker can kick the ball from anywhere, as many times as they want, while the defender loses the moment even one gets through. That's why they said 'it's just difficult.'
110AnonymousOct 10, 2026 13:06
There's no way a company like Rakuten has 100 million members to begin with.
112AnonymousOct 10, 2026 13:06
Re: #110
It's possible the same people are just making tons of accounts each.
125AnonymousOct 10, 2026 13:10
Re: #110
Rakuten officially states it has over 100 million domestic IDs.
https://corp.rakuten.co.jp/careers/services/
> Rakuten currently boasts over 100 million* members domestically. Going forward, we aim to expand the 'Rakuten Ecosystem' globally as well, delivering fun, convenient services to over 2.1 billion Rakuten Group service users worldwide.
130AnonymousOct 10, 2026 13:12
Someone needs to deal with the trash media ("masugomi," a derogatory slur combining "mass media" and "garbage") that spread this fake news.
132AnonymousOct 10, 2026 13:14
Re: #130
It was only ever reported as 'a hacker claimed this,' so it's not technically fake news.

Background and Key Points of This Discussion

Rakuten’s official site states it has “over 100 million” members domestically, and within the thread, post #125 cites this very figure to argue that a scale of “100 million” isn’t inherently implausible. At the same time, readers can easily misread Rakuten’s statement that “no fact of a data leak has been confirmed” — this is standard corporate-PR phrasing indicating that nothing has been substantiated yet, not a definitive conclusion from an investigation that no leak occurred. The thread split into two camps, neither going beyond speculation: (1) those who see the huge figure as evidence the claim is fabricated or exaggerated, and (2) those who point to the sheer volume of phishing emails they receive daily as evidence that Rakuten’s data must have been leaking for a while already. It’s also worth noting that phishing emails themselves can stem from leaks at other companies or from indiscriminate spam campaigns, so they don’t actually prove a direct leak from Rakuten.

*This article is excerpted and summarized from the 5ch (Breaking News+) thread “Rakuten Group Denies Rumors of a Leak Involving Over 100 Million Members’ Data — “No Fact of a Data Leak Has Been Confirmed”.”

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *