From our other sites
The story
On November 2, electronics retail chain Nojima announced that the member management systems for its online shopping site “Nojima Online” and its used-smartphone buyback site had suffered unauthorized access, leaking a combined total of roughly 7 million customer records. On 5ch’s Breaking News+ thread, opinions split over whether this kind of breach is a global trend or a Japan-specific phenomenon, with posters raising concrete points about the risk of SMS phishing enabled by leaked phone numbers and about users’ right to request deletion of their personal data. The thread also noted that Bic Camera had disclosed a leak of around 14.9 million records of its own, with posters voicing unease over the string of attacks hitting major corporations.
Nojima: 7 Million Member Records Leaked
Nojima <7419> said on the 2nd that the member management systems for its “Nojima Online” shopping site and “used smartphone buyback site” had suffered unauthorized access, leaking a combined total of roughly 7 million member records
2026/11/2
Source: news.yahoo.co.jp / Original article here
What people said
Happens worldwide. But not many countries go public about the damage this openly — Japan's the exception here, which is why it's drawing attention.
Worldwide. About half of the companies getting breached and leaking data are American. Japan's numbers are still small, but the rate of increase compared to recent years is huge.
Over in Europe, supermarket refrigerators are getting remotely hijacked.
Every company's membership numbers are probably about to crash.
Deleting your account doesn't really change anything — the data's still sitting in the former-members file.
Users actually have a "right to request deletion of personal data." Instead of just hitting a delete button, you can formally demand they erase everything except what they're legally required to retain.
Contact them through their privacy policy page — usually by phone. Japanese law requires companies to actually delete your data once you request it.
They went and leaked the phone number too — are they idiots or what?
What's actually scary about a leaked phone number?
Big-Kojima (pun on Bic Camera/Kojima): "He was the #3 of the Electronics Four Heavenly Kings… taken down by North Korea, of all things…"
Yodobashi: "Scary! This is scary!!"
Amazon-jii: "If one of us goes down, we go down together 💕"
Edion: "If we get hit too, guess that'd finally make us 'major league'"
Nojima's actually #2.
Throw PC Depot in there too — they're technically siblings (on the family register, so to speak).
You start getting scam texts. SMS doesn't have as solid spam filtering as email, so the risk is you're more likely to actually see them.
Anyone dumb enough to open a text they never asked for was already going to fall for some other scam eventually, leak or no leak lol
If the "National Tax Agency" shows up in my shopping email, I'll just gracefully ignore it.
Guess we're at the point where you need a dedicated phone number just for financial accounts too.
No matter how much you harden your defenses, you end up breached anyway.
Guess that means there's really no winning move, security-wise.
If you've got bank-level resources, you can actually stop it.
The real nightmare is if money actually gets drained straight out of Japanese people's bank accounts.
Not even clear whether the ¥10 million deposit guarantee would cover a cyberterror attack.
AI says it wouldn't apply. Apparently the government guarantee only covers bank runs/failures, not this.
You keep saying the exact same thing. Nice fearmongering, shill.
They don't even have passkeys or two-factor authentication.
An NHK account itself has basically zero value, so who cares about 2FA.
Besides, these leaks happen because of server-side vulnerabilities being exploited — 2FA wouldn't stop that anyway.
As an address book, NHK's gotta be one of the biggest in Japan, no question.
Wait, do you actually think they're breaking into accounts one by one to harvest personal info?
https://www.biccamera.com/bc/c/info/report/sorry_20261102.jsp
Yeah, that tracks lol
Something about that URL just pisses me off lol
Background and Key Points of This Discussion
Japan’s Act on the Protection of Personal Information grants users a “right to request deletion of retained personal data,” meaning they can ask a company to delete any personal data it isn’t legally required to keep. But canceling a membership or deleting an account doesn’t erase data that has already leaked externally, so the notion floated in the thread that “canceling means you’re safe” is a misunderstanding. The backdrop here is a wave of attacks on major corporations, including electronics retailers — in parallel with this case, Bic Camera also disclosed a leak of roughly 14.9 million records. Opinions in the thread split over whether such leaks are a global trend, with some arguing the high number of disclosures simply reflects Japan being more forthcoming about reporting breaches, while others saw it as a straightforward rise in actual incidents. Practical concerns also came up, such as the risk of SMS phishing enabled by leaked phone numbers.
*This article is compiled from excerpts and a summary of the 5ch (Breaking News+) thread “Nojima Hit by Cyberattack, 7 Million Member Records Leaked.”
Leave a Reply