From our other sites
The story
On October 28, Matsuya Foods, the beef bowl chain, announced that its official app and the management systems for Matsuben Net, Mobile Order, and Matsuben Delivery had been hit by unauthorized access, leaking users’ names, phone numbers, and addresses. The affected data covers roughly 2,377,000 Mobile Order/Delivery users and up to 3,000 official app members; credit card information is reportedly unaffected since it’s managed separately by the payment processor. On 5ch, the discussion centered on surprise that people had handed over that much personal information to a fast-food app, along with jokes about what the leaked data could even be used for.
Beef bowl chain “Matsuya”: roughly 2.38 million people’s personal information leaked — unauthorized access to official app’s management system
It has come to light that personal information for approximately 2.38 million people was leaked from major beef bowl chain Matsuya.
According to Matsuya Foods, the management system for the official Matsuya app was accessed without authorization on the 28th of this month, leaking member information and other data.
Source: news.yahoo.co.jp / Original article here
What people said
Maybe because of Matsuya Delivery?
【Notice of Service Suspension for the Matsuya App and Other Services】
We have detected unauthorized access from an external source, so
the official Matsuya app (Matsuben Net, Mobile Order, Matsuben Delivery) and related services including the website have been suspended.
You rack up a ton of points through Matsuben Net.
McDonald's, KFC, and pizza places all have apps too lol
If anything, having zero apps installed makes YOU look like the clueless one lol
Don't even start wwww
This article's bogus www
1. Information confirmed leaked and record counts
For customers registered on the official Matsuya app: "Member ID," "prefecture," "name," "phone number," "date of birth," "email address," "encrypted password," and "Matsuya Points."
Count: 2,000 records (could be as many as 3,000)
For customers who used Matsuben Net, Mobile Order, or Matsuben Delivery: "Member ID," "delivery address," "name," "phone number," and "Matsuya Points."
Count: 2,377,127 records
Note that credit card information is not held by our company.
Squeezing even more out of broke people is half the fun
If anything, cross-referencing it with other leaked databases could make it a handy filter for weeding out the ones who clearly have no money to take
I could grudgingly live with people finding out about FANZA, but I really don't want my purchase history exposed
FANZA would be less embarrassing
It's nothing but broke people
Exactly
If anything, it might come in handy as a "cross these off" list
Seems like you could still reel them in with a "great deal" pitch though
That's basically a sucker list
Guess eating in the store really is the right call after all lol
For Matsuya and Matsunoya, doesn't everyone go to the store and then order through the app anyway? Since it's cheaper that way
X coupons are cheaper, so I switch between the two
If you're a heavy user you also rack up points, so stacking the coupon with the points makes a real difference — at Black rank it works out to roughly a 20% discount
Tokuryu: "Nice work. So whose customers is this?"
Hacker: "Matsuya's. The beef bowl chain."
Tokuryu: "Are you mocking me?"
Not useful for targeting, but it could work for recruiting disposable pawns
Payment processing is almost always outsourced entirely to a separate specialist company
Probably just one free egg topping or something
As an apology, apparently everyone gets bumped up one loyalty rank next month with no conditions attached
Not sure how many people are already at the top rank, but the notice says they'll get a separate perk instead
Pretty much everyone's data probably got leaked
They were pushing coupons and point-backs pretty hard, so yeah
I've used it myself
The official count is 6 million, so that's about a third
Surprisingly a lot of people use Mobile Order
Especially for takeout
Wonder if they actually deleted my info
It's sitting right there in the most obvious spot on the server.
>What leaked was the address, name, phone number, etc. of roughly 2,377,000 people who used Mobile Order or Matsuben Delivery, plus the prefecture, name, phone number, date of birth, etc. of 2,000 registered app users.
A lot of supermarket apps are the same way
I basically never use an app if the signup screen asks for a bunch of info besides your email address
Background and key points of this discussion
Under Japan’s Personal Information Protection Act, once a leak above a certain scale occurs, businesses are required to report it to the Personal Information Protection Commission and notify the individuals affected. In Matsuya’s case, two leaks of very different scale — official app members (up to 3,000 records) and Mobile Order/Delivery users (about 2,377,000 records) — were announced together, which is partly why reactions to the numbers varied so much in the thread. Credit card information is said to be unaffected since it’s managed separately by the payment processor, but it’s easy to overlook that the leaked addresses and phone numbers were real data that had actually been used as delivery destinations. That the thread’s focus landed more on “I can’t believe I handed a beef bowl chain that much personal information” than on concrete harm from the leak itself reflects a gap between how people actually use these services and how they perceive the risk.
※This article is excerpted and summarized from the 5ch (News Speed+) thread “[Breaking] Beef bowl chain “Matsuya” hit by cyberattack, roughly 2.38 million people’s personal information leaked — names, phone numbers, addresses, etc.“.
Leave a Reply